GDPR Security & Access Management

Question 1

What is the principle of least privilege?

Accepted Answer

Granting users only the minimum access necessary to perform their duties

Answer

The principle of least privilege limits access to the minimum necessary for job functions, reducing the attack surface and potential impact of compromised accounts.

Question 2

Which authentication method provides the strongest security?

Accepted Answer

Multi-factor authentication combining different verification types

Answer

Multi-factor authentication combining different verification types (something you know, have, and are) provides the strongest protection against unauthorized access.

Question 3

What is the primary purpose of security auditing?

Accepted Answer

To identify vulnerabilities and verify compliance with security policies

Answer

Security auditing identifies vulnerabilities, verifies policy compliance, and provides evidence of due diligence in protecting organizational assets.

Question 4

How should security incidents be handled?

Accepted Answer

Following an established incident response plan with documentation

Answer

Following an established incident response plan ensures consistent, effective handling while documentation supports analysis, compliance, and future prevention.

Question 5

What is the role of encryption in data security?

Accepted Answer

Protecting data confidentiality during storage and transmission

Answer

Encryption protects data confidentiality by making information unreadable without proper decryption keys, whether data is stored (at rest) or being transmitted (in transit).

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

GDPR Security & Access Management