Security and Access Controls CDPSE Practice Questions (Page 10)

Questions 46–48

1. 46foundation · easy

   Which practice is essential to ensure logs are available for incident investigation after a security breach?

   • AStoring logs only on local machines
   • BStoring logs in a centralized, tamper-evident repository
   • CEncrypting logs but not backing them up
   • DDeleting logs after 30 days to reduce storage costs
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   What is the primary purpose of threat modeling in the system design phase?

   • ATo identify potential security and privacy threats and design mitigations
   • BTo document the system architecture for future reference
   • CTo test the system after deployment for vulnerabilities
   • DTo comply with regulatory requirements for data protection
   Reveal Solution Discussion Select an answer first
3. 48foundation · easy

   Which principle states that users should be granted only the minimum level of access necessary to perform their job functions?

   • ANeed to know
   • BSeparation of duties
   • CLeast privilege
   • DDefense in depth
   Reveal Solution Discussion Select an answer first