SY0-501 Question #10: Real Exam Question with Answer & Explanation

Question

A security administrator is developing controls for creating audit trails and tracking if a PHI data breach is to occur. The administrator has been given the following requirements: * All access must be correlated to a user account. * All user accounts must be assigned to a single individual. * User access to the PHI data must be recorded. * Anomalies in PHI data access must be reported. * Logs and records cannot be deleted or modified. Which of the following should the administrator implement to meet the above requirements? (Select THREE).

Options

• AEliminate shared accounts.
• BCreate a standard naming convention for accounts.
• CImplement usage auditing and review.
• DEnable account lockout thresholds.
• ECopy logs in real time to a secured WORM drive.
• FImplement time-of-day restrictions.
• GPerform regular permission audits and reviews.