EDI Security and Compliance 3

Question 1

Which access control model is best suited for restricting EDI system access based on job function?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC assigns permissions based on job roles, making it ideal for EDI environments where access should be limited by business function.

Question 2

What does an EDI audit trail primarily provide?

Accepted Answer

A chronological record of all EDI transactions and system activities

Answer

An EDI audit trail records transaction events chronologically, enabling compliance verification, dispute resolution, and fraud detection.

Question 3

Which technique involves testing an EDI system by sending malformed or unexpected data to find security vulnerabilities?

Accepted Answer

Fuzz testing

Answer

Fuzz testing sends invalid, unexpected, or random data to an EDI system to uncover parsing errors or security flaws.

Question 4

In EDI, what is the purpose of a functional acknowledgment (997/999)?

Accepted Answer

To confirm receipt and syntactical acceptance of an EDI transaction

Answer

The 997/999 functional acknowledgment confirms that an EDI transaction was received and passed syntax validation, supporting compliance tracking.

Question 5

What security measure should be applied to EDI data stored in databases to protect it from unauthorized access?

Accepted Answer

Data masking and encryption at rest

Answer

Encrypting EDI data at rest and masking sensitive fields protects stored information even if storage media is compromised.

(EDI) Practice Test