GMI Security & Access Management 3 — Questions and Answers
Question 1: Which encryption standard is widely recommended for protecting sensitive graphic design files stored on a server at rest?
- DES (Data Encryption Standard)
- MD5
- AES-256 (Advanced Encryption Standard) (Correct answer)
- Base64 encoding
Correct answer: AES-256 (Advanced Encryption Standard)
AES-256 is the industry-standard symmetric encryption algorithm used to protect data at rest due to its strong security.
Question 2: A graphic artist receives an email asking them to click a link and re-enter their company login credentials. This is most likely a:
- Brute force attack
- Phishing attack (Correct answer)
- Man-in-the-middle attack
- SQL injection attack
Correct answer: Phishing attack
Phishing attacks use deceptive emails or messages to trick users into revealing credentials on fake websites.
Question 3: In the context of network security, what does a VPN primarily provide for remote graphic production workers?
- Faster file transfer speeds
- An encrypted tunnel for secure remote access (Correct answer)
- Automatic file backups
- Protection against malware on local devices
Correct answer: An encrypted tunnel for secure remote access
A VPN creates an encrypted connection between a remote user's device and the company network, protecting data in transit.
Question 4: Which security concept describes segmenting a network so that a breach in one segment does not automatically compromise all other systems?
- Single sign-on (SSO)
- Network segmentation (Correct answer)
- Identity federation
- Zero-trust architecture
Correct answer: Network segmentation
Network segmentation divides a network into isolated zones, containing breaches and limiting lateral movement by attackers.
Question 5: When configuring file permissions for a shared graphic assets folder, granting 'read-only' access to most staff is an application of which security principle?
- Defense in depth
- Least privilege (Correct answer)
- Non-repudiation
- Data integrity
Correct answer: Least privilege
Granting only read access to users who don't need to modify files applies the least privilege principle, reducing the risk of accidental or malicious changes.
Question 6: What is the primary purpose of an audit log in a secure graphic production system?
- To speed up file rendering processes
- To record user actions for accountability and incident investigation (Correct answer)
- To back up production files automatically
- To enforce password complexity requirements
Correct answer: To record user actions for accountability and incident investigation
Audit logs create a tamper-evident record of user actions, supporting accountability, forensic investigations, and compliance.
Question 7: A print shop uses a badge system where employees can only access areas relevant to their job. This physical security control aligns with which logical security principle?
- Multi-factor authentication
- Least privilege (Correct answer)
- Encryption at rest
- Incident response
Correct answer: Least privilege
Restricting physical access to only the areas an employee needs mirrors the logical least privilege principle applied to physical spaces.
GMI Security & Access Management 3
Which encryption standard is widely recommended for protecting sensitive graphic design files stored on a server at rest?