Security & Access Management Flashcards
7 cards from real GMI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security & Access Management flashcards as text
Which encryption standard is widely recommended for protecting sensitive graphic design files stored on a server at rest?
Answer: AES-256 (Advanced Encryption Standard)
AES-256 is the industry-standard symmetric encryption algorithm used to protect data at rest due to its strong security.
A graphic artist receives an email asking them to click a link and re-enter their company login credentials. This is most likely a:
Answer: Phishing attack
Phishing attacks use deceptive emails or messages to trick users into revealing credentials on fake websites.
In the context of network security, what does a VPN primarily provide for remote graphic production workers?
Answer: An encrypted tunnel for secure remote access
A VPN creates an encrypted connection between a remote user's device and the company network, protecting data in transit.
Which security concept describes segmenting a network so that a breach in one segment does not automatically compromise all other systems?
Answer: Network segmentation
Network segmentation divides a network into isolated zones, containing breaches and limiting lateral movement by attackers.
When configuring file permissions for a shared graphic assets folder, granting 'read-only' access to most staff is an application of which security principle?
Answer: Least privilege
Granting only read access to users who don't need to modify files applies the least privilege principle, reducing the risk of accidental or malicious changes.
What is the primary purpose of an audit log in a secure graphic production system?
Answer: To record user actions for accountability and incident investigation
Audit logs create a tamper-evident record of user actions, supporting accountability, forensic investigations, and compliance.
A print shop uses a badge system where employees can only access areas relevant to their job. This physical security control aligns with which logical security principle?
Answer: Least privilege
Restricting physical access to only the areas an employee needs mirrors the logical least privilege principle applied to physical spaces.