A government agency implemented a new case management system that handles sensitive citizen data. The BA is evaluating the solution and discovers that the system's encryption keys are stored on the same server as the data. The agency has a security policy that requires encryption keys to be stored separately. What should the BA recommend?

Move the encryption keys to a hardware security module (HSM) or a separate key management service.

Encrypt the encryption keys with a passphrase to add an extra layer of security.

Disable the encryption feature until the keys are stored separately.

Document the risk and accept it because the system is already in production.

PMIProfessional in Business Analysis

Domain 5Objective 2

Task 2 PMI-PBA Practice Questions (Page 9)

Part of the Evaluation domain, which accounts for 10% of the PMI-PBA exam. PMI does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–16 in this domain), expect 3–4 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

15concepts

10%of the exam

Questions 41–41

41expert · hard
A government agency implemented a new case management system that handles sensitive citizen data. The BA is evaluating the solution and discovers that the system's encryption keys are stored on the same server as the data. The agency has a security policy that requires encryption keys to be stored separately. What should the BA recommend?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to PMI-PBA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by PMI. “PMI-PBA” is a trademark of its owner, used for identification only.

Task 2 PMI-PBA Practice Questions (Page 9)

Questions 41–41

Keep studying — Evaluation