Obi-Wan Kenobi Full Season Download
As a student, I get bored. I find stuff to watch or play and this show has me hooked. Liked it so much I decided to share it with you guys. Enjoy. S1.1 S1.2 S1.3 S1.4 S1.5 S1.6
- Get link
- X
- Other Apps
CYB 205 Infrastructure Administration
Q: Theresa is implementing a new access control system and wants to ensure that developers do not have the ability to move code from development systems into the production environment. What information security principle is she most directly enforcing?
A: Separation of duties
Explanation: According to the scenario, Theresa is directly enforcing the separation of duties principle. This principle takes a business process that might logically be performed by one subject and breaks it down into subprocesses, each of which is allocated to a different, separate subject to perform. In the given question, while developers may feel like they have a business need to be able to move code into production, the principle of separation of duties dictates that they should not have the ability to write code and place it on a production server. The deployment of code is often performed by change management staff.Answer C is incorrect. Revocation is the formal process of terminating access privileges for a specific identity in a system.Answer B is incorrect. Privilege creep happens when duties have changed and yet privileges that are no longer actually needed remain in effect for a given user.Answer A is incorrect. Job rotation is a strategy where employees rotate between jobs in the same business.
- Get link
- X
- Other Apps
Popular posts from this blog
CYB 205 Infrastructure Administration Q: Jim is implementing an IDaaS solution for his organization. What type of technology is he putting in place? A: Identity as a service Explanation: Jim is using the IDaaS (Identity as a service) technology, which provides an identity platform as a third-party service. It is a cloud-based service for obtaining subscription-based identity management and access control capabilities.Answers B and C are incorrect. These are the invalid choices.Answer D is incorrect. OAuth is a standard that applications can use to provide client applications with secure delegated access.
CYB 205 Infrastructure Administration Q: Alejandro is an incident response analyst for a large corporation. He is on the midnight shift when an intrusion detection system alerts him to a potential brute-force password attack against one of the company’s critical information systems. He performs an initial triage of the event before taking any additional action. A: Activate the incident response team. Explanation: The incident response process consists of a series of steps that start with detection and run through response, mitigation, reporting, recovery, and remediation, ending with a lessons learned and onward preparation phase. After the detection of a security incident, the next step in the process is the response, which should follow the organization’s formal incident response procedure. The first step of this procedure is activating the appropriate teams, including the organization's computer security incident response team (CSIRT).Answers A and D are incorrect. Lessons lear...
CYB 205 Infrastructure Administration Q: Elaine is developing a business continuity plan for her organization. What value should she seek to minimize? A: RTO Explanation: Elaine should seek to minimize the recovery time objective value. The goal of business continuity planning exercises is to reduce the amount of time required to restore operations. This is done by minimizing the recovery time objective (RTO). RTO is the amount of time expected to return an IT service or component to operation after a failure.Answer C is incorrect. SLAs (service-level agreements) are written contracts that document service expectations.Answers B and D are incorrect. The Secure Socket Layer (SSL) and the Lightweight Directory Access Protocol (LDAP) are the network protocols.
Comments
Post a Comment