Security & Access Management Flashcards
7 cards from real GMI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security & Access Management flashcards as text
Which authentication method combines a password with a one-time code sent to a mobile device, providing stronger security than a password alone?
Answer: Multi-factor authentication (MFA)
MFA requires two or more verification factors, so a stolen password alone is insufficient to gain unauthorized access.
Under a zero-trust security model, how is network access granted to users?
Answer: Only after continuous verification regardless of network location
Zero trust operates on 'never trust, always verify,' requiring continuous authentication and authorization for every access request.
When a graphic production company transfers client files via email, which technology best protects the file contents from interception?
Answer: End-to-end encryption of the email or attachment
End-to-end encryption ensures only the sender and intended recipient can read the transmitted data, preventing interception.
What is 'privilege creep' in an organizational security context?
Answer: Users accumulating excess permissions over time as their roles change
Privilege creep occurs when users retain access rights from previous roles, resulting in accumulated permissions beyond what current duties require.
In a digital rights management (DRM) system for graphic assets, what does a 'license' typically control?
Answer: How, where, and for how long a file can be used
DRM licenses define usage rules such as the number of devices, usage duration, and permitted actions for a protected digital asset.
Which security measure should be applied to portable storage devices (USB drives) used to transport graphic production files?
Answer: Encrypting the device contents
Encrypting portable storage ensures that if a device is lost or stolen, the data remains inaccessible to unauthorized parties.
What term describes a formal document that defines acceptable and prohibited uses of a company's information systems and data?
Answer: Acceptable Use Policy (AUP)
An Acceptable Use Policy outlines the rules employees must follow when using company technology, reducing security and legal risk.