CAS-003 · Question #297
An organization has established the following controls matrix: The following control sets have been defined by the organization and are applied in aggregate fashion: Systems containing PII are…
The correct answer is A. Proximity card access to the server room, context-based authentication, UPS, and full-disk. The company wants to secure their database and techniques such as full-disk encryption for the database server is important due to the reason the database contains medical and PII data. D – IDS will only detect the data and access without permission.
Question
An organization has established the following controls matrix:
The following control sets have been defined by the organization and are applied in aggregate fashion:
Systems containing PII are protected with the minimum control set. Systems containing medical data are protected at the moderate level. Systems containing cardholder data are protected at the high level. The organization is preparing to deploy a system that protects the confidentially of a database containing PII and medical data from clients. Based on the controls classification, which of the following controls would BEST meet these requirements?
Exhibit
Options
- AProximity card access to the server room, context-based authentication, UPS, and full-disk
- BCipher lock on the server room door, FDE, surge protector, and static analysis of all application
- CPeer review of all application changes, static analysis of application code, UPS, and penetration
- DIntrusion detection capabilities, network-based IPS, generator, and context-based authentication.
How the community answered
(15 responses)- A67% (10)
- B20% (3)
- C7% (1)
- D7% (1)
Explanation
The company wants to secure their database and techniques such as full-disk encryption for the database server is important due to the reason the database contains medical and PII data. D – IDS will only detect the data and access without permission.
Topics
Community Discussion
No community discussion yet for this question.