A security analyst works on a project designed to reduce the risk of vishing. They develop a plan to protect their organization from attackers who could exploit biometrics. Which type of security control does this scenario describe?1 pointEncryptionClassificationCiphertextAuthentication

Fill in the blank: Security controls are safeguards designed to reduce _____ security risks. 1 pointpublicbroadscalespecificgeneral

Question 1What does a security professional use to create guidelines and plans that educate employees about how they can help protect the organization? 1 pointSecurity auditSecurity postureSecurity frameworkSecurity hardening2.Question 2Fill in the blank: A security professional uses _____ to verify that an employee has permission to access a resource.1 pointencryptionadmissionauthorizationintegrity3.Question 3What type of social engineering attack attempts to exploit biometrics?1 pointWhaling VishingSpear phishing Cryptographic attack4.Question 4You work as a security analyst for a supply chain organization and need to confirm all inventory data is correct, authentic, and reliable. Which core principle of the CIA triad are you using?1 pointCredibilityConfidentialityIntegrityAvailability

You are the security manager for a large company. You have been tasked with implementing a new physical security policy for the company's data center. Which of the following physical security controls would be the most effective in preventing unauthorized access to the data center?1.0 MarksMantrapsBiometric access controlAll of the aboveSecurity guardsClosed-circuit surveillance cameras

An organization plans to implement security training to educate employees about security policies. What type of access control is the organization trying to implement?Question 30Select one:logicaltechnologicaladministrativephysical

A healthcare organization is concerned about employees accessing patient records without proper authorization. What physical control should they implement to prevent such incidents?1.0 MarksTwo-factor authenticationRole-based access controlSecurity awareness trainingData encryptionPrivacy screens on monitors