Access Control Flashcards

What is defense in depth in the context of PCIP security?

Answer: Implementing multiple layers of security controls

Defense in depth uses multiple layers of security controls so that if one layer fails, additional layers continue to provide protection.

Which principle states that users should only have access necessary for their role?

Answer: Principle of least privilege

The principle of least privilege ensures users only have the minimum access rights needed to perform their job functions, limiting potential damage.

In PCIP practice, what is the purpose of vulnerability scanning?

Answer: To identify weaknesses before attackers do

Vulnerability scanning proactively identifies security weaknesses in systems and applications so they can be remediated before exploitation.

What is the recommended response when a security incident is detected in an PCIP environment?

Answer: Follow the incident response plan: contain, eradicate, recover

Following a structured incident response plan ensures containment of the threat, eradication of the cause, and recovery to normal operations.

Which authentication factor is classified as "something you are"?

Answer: Biometric data

Biometric data such as fingerprints, facial recognition, or retinal scans represents the "something you are" authentication factor.

What is the primary purpose of encryption in PCIP security?

Answer: To protect data confidentiality during storage and transmission

Encryption protects data confidentiality by converting information into an unreadable format that can only be decoded with the proper key.