Assessing Corporate Cybersecurityintermediate
Match each security architecture component with its primary function: Components: 1. Security policies and standards 2. Network security architecture 3. Identity and access management (IAM) 4. Data protection and encryption Functions: A. Enforces authentication, authorization, and user access privileges B. Defines organizational rules, compliance requirements, and governance baselines C. Protects sensitive information confidentiality and integrity at rest and in transit D. Applies segmentation, firewalls, and traffic controls to protect communication flows
Answer
1 - B, 2 - D, 3 - A, 4 - C
Explanation
### The pairs
| Item | Matches | Why |
|---|---|---|
| Security policies and standards | Establish organizational rules and guidelines | They state the rules and expectations people and systems must follow. |
| Network security architecture | Uses network design and controls to secure data flow | Network protections help control traffic and reduce exposure. |
| Identity and access management | Controls authentication, authorization, and access rights | It determines who is accessing a resource and what they may do. |
| Data protection and encryption | Safeguards sensitive data at rest and in transit | Encryption protects stored or moving information from unauthorized access. |
### Terms
- **Authentication**: Checking that a user or system is who it claims to be.
- **Authorization**: Deciding what an authenticated user or system is allowed to do.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free