Security & Access Control Flashcards

Which approach gives administrators elevated rights only for a limited, approved time window?

Answer: Just-in-time (JIT) privileged access

JIT access grants elevated privileges on demand for a set period and then revokes them automatically.

In a cloud key management strategy, what does 'Bring Your Own Key' (BYOK) mainly give the organization?

Answer: Control over generating and managing the keys used to encrypt its data in the provider's service

BYOK lets the customer create and control the encryption keys instead of relying only on provider-generated keys.

A sales manager should see only rows for customers in their own region in a shared table. Which feature delivers this?

Answer: Row-level security

Row-level security filters which records a user can see based on predicates such as region.

Which statement best describes pseudonymization under GDPR?

Answer: Data is processed so it cannot be attributed to a person without additional information that is kept separately

GDPR treats pseudonymized data as personal data, because re-identification is possible with separately held information.

What is the primary function of a Data Loss Prevention (DLP) solution?

Answer: Detecting and blocking unauthorized transfer of sensitive data out of the organization

DLP inspects data in use, in motion, and at rest to stop sensitive information from leaving through unauthorized channels.

Under HIPAA, what does the 'minimum necessary' standard require?

Answer: Limiting use and disclosure of protected health information to the least amount needed for the purpose

The minimum necessary standard limits PHI access and disclosure to what the task actually requires.

Which identity standard is most commonly used for browser-based enterprise single sign-on through the exchange of XML assertions?

Answer: SAML 2.0

SAML 2.0 exchanges XML-based authentication and authorization assertions between an identity provider and service providers.