Multiple Choice
A security administrator is developing controls for creating audit trails and tracking if a PHI data breach is to occur. The administrator has been given the following requirements: All access must be correlated to a user account. All user accounts must be assigned to a single individual. User access to the PHI data must be recorded. Anomalies in PHI data access must be reported. Logs and records cannot be deleted or modified. Which of the following should the administrator implement to meet the above requirements? (Choose three.)
A) Eliminate shared accounts.
B) Create a standard naming convention for accounts.
C) Implement usage auditing and review.
D) Enable account lockout thresholds.
E) Copy logs in real time to a secured WORM drive.
F) Implement time-of-day restrictions.
G) Perform regular permission audits and reviews.
Correct Answer:
Verified
Correct Answer:
Verified
Q1109: Security administrators attempted corrective action after a
Q1110: A security administrator wants to implement least
Q1111: A security administrator has received multiple calls
Q1112: Which of the following strategies should a
Q1113: A company hires a third-party firm to
Q1115: During a security audit of a company's
Q1116: An auditor is performing an assessment of
Q1117: A help desk technician is trying to
Q1118: Which of the following serves to warn
Q1119: Using an ROT13 cipher to protect confidential