P3M1- Security methods (Software & Data) Part 2

What is a common method for protecting IT Systems and data in a bank regarding software and data?

• Physical locks

• Open-source software

• Policies and procedures

• Public Wi-Fi access

Which of the following is NOT a recommended practice for password and authentication control?

• Regular password updates

• Using the same password for all accounts

• Password strength requirements

• Two-factor authentication

What does encryption primarily protect?

• Data confidentiality

• Data integrity

• Software licenses

• Physical access to devices

Which of the following is a key aspect of access levels and controls?

• Unlimited access for all users

• Setting of passwords

• Physical barriers

• Open network policies

What is NOT a part of software access controls?

• Usernames

• Biometric security

• Software updates

• Backup and retention policies

Which of the following best describes the purpose of multi-factor authentication (MFA)?

• To increase the complexity of passwords

• To provide an additional layer of security beyond a password

• To track user activities on systems

• To reduce the need for passwords

What role does 'user role management' play in access control?

• It ensures all users have the same level of access to resources.

• It allows users to choose their own access levels.

• It assigns and limits user access based on their role within the organization.

• It is primarily used for auditing purposes only.

Why is it important to regularly update software and systems?

• To ensure compatibility with new hardware

• To keep the user interface fresh and engaging

• To introduce new features to the system

• To patch security vulnerabilities and protect against threats