Question 1

A government agency is planning a hybrid cloud deployment. Strict controls must be in place that can label classified data. The solution must ensure that access rights will be granted based on the user's government security classification. Which type of access control should be used?

Options :

A : Mandatory access control (MAC)

B : Attribute-based access control (ABAC)

C : Discretionary access control (DAC)

D : Role-based access control (RBAC)

Answer: A

Question 2

What type of a system requirement involves preventing unauthorized access to data?

Options :

A : Accessibility

B : Design

C : User needs

D : Security

Answer: D

Question 3

A healthcare organization would like to interoperate with another healthcare organization without needing to maintain individual accounts for members of the other organization. Which technology concept should the company use?

Options :

A : Single Sign-On (SSO)

B : Federated Authentication

C : Multi-Factor Authentication (MFA)

D : Cloud Identity Provider

Answer: B

Question 4

A company recently updated its disaster recovery plan (DRP) to ensure business continuity in the event of a disruptive incident. Which step will ensure the effectiveness of the DRP?

Options :

A : Training employees on their roles and responsibilities during a disaster

B : Performing a risk assessment of the company’s information assets

C : Developing and implementing a testing plan for the DRP

D : Reviewing and updating the DRP regularly to ensure it remains relevant

Answer: D

Question 5

A security engineer has been asked to audit unapproved changes that have recently taken place in a corporate application. Which logging mechanism will create an audit trail?

Options :

A : NetFlow logs

B : Access logs

C : Packet capture logs

D : Router logs

Answer: B