A healthcare organization stores patient records in a cloud database. The compliance team requires that only authorized medical staff can view patient data, but the data must remain available for emergency access. The organization also needs to ensure that any changes to patient records are traceable. Which combination of controls best addresses these requirements?

Implement multi-factor authentication (MFA) for all users and set up database replication to a secondary site.

Encrypt the database at rest and in transit, and use digital signatures on all records.

Implement role-based access control (RBAC) and enable audit logging for all database transactions.

Use data masking for all patient records and implement a backup strategy with daily snapshots.

Certified Information Systems Security Professional

Domain 1Objective 2

1.2 - Understand and Apply Security Concepts CISSP Practice Questions (Page 5)

Part of the Security and Risk Management domain, which accounts for 16% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

16%of the exam

Questions 21–25

21foundation · easy
Which of the following is a primary mechanism used to enforce confidentiality?
Select an answer first
22application · medium
A healthcare organization stores patient records in a cloud database. The compliance team requires that only authorized medical staff can view patient data, but the data must remain available for emergency access. The organization also needs to ensure that any changes to patient records are traceable. Which combination of controls best addresses these requirements?
Select an answer first
23foundation · easy
Which mechanism is most commonly associated with providing nonrepudiation?
Select an answer first
24foundation · easy
Which of the following is a common method used to verify authenticity?
Select an answer first
25foundation · easy
Which of the following mechanisms is commonly used to detect unauthorized modification of data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

1.2 - Understand and Apply Security Concepts CISSP Practice Questions (Page 5)

Questions 21–25

Which of the following is a primary mechanism used to enforce confidentiality?

Which mechanism is most commonly associated with providing nonrepudiation?

Which of the following is a common method used to verify authenticity?

Which of the following mechanisms is commonly used to detect unauthorized modification of data?

Keep studying — Security and Risk Management