Question 6 of 484
Which part of an operating system (OS) is responsible for providing security interfaces among the hardware, OS, and other parts of the computing system?
    Correct Answer: D

    The Security Kernel is the part of an operating system responsible for providing security interfaces among the hardware, OS, and other parts of the computing system. It acts as the core of the Trusted Computing Base (TCB) and implements the fundamental security procedures for controlling access to system resources. It is required to mediate all access, ensuring that security policies are enforced. The Security Kernel ensures secure interactions and prevents unauthorized access, making it the critical component in the OS for providing security interfaces.

Question 7 of 484
What process facilitates the balance of operational and economic costs of protective measures with gains in mission capability?
    Correct Answer: D

    Risk management is the process that enables the balance of operational and economic costs of protective measures with the gains in mission capability. It involves identifying, assessing, and prioritizing risks and implementing measures to mitigate these risks in a cost-effective manner. By evaluating the likelihood and impact of risks alongside the costs and benefits of protective measures, organizations can make informed decisions to optimize their resources in line with their mission goals.

Question 8 of 484
Clothing retailer employees are provisioned with user accounts that provide access to resources at partner businesses. All partner businesses use common identity and access management (IAM) protocols and differing technologies. Under the Extended Identity principle, what is the process flow between partner businesses to allow this IAM action?
    Correct Answer: B

    Clothing retailer acts as an identity provider (IdP), confirms the identity of the user using industry standards, then sends credentials to partner businesses that act as Service Providers. These Service Providers allow access to their services or resources. This flow aligns with the Extended Identity principle, which enables seamless access across different organizations by leveraging common IAM protocols.

Question 9 of 484
Which of the following statements BEST describes least privilege principle in a cloud environment?
    Correct Answer: D

    The least privilege principle in a cloud environment means providing the minimum level of access or permissions necessary for users and systems to perform their tasks. This helps to reduce the risk of unauthorized access or potential security breaches. Network segments that remain private if they are not needed to access the internet is a practice that aligns with this principle. By keeping unnecessary network segments private, exposure to potential attacks is minimized, adhering to the least privilege concept.

Question 10 of 484
An organization has been collecting a large amount of redundant and unusable data and filling up the storage area network (SAN). Management has requested the identification of a solution that will address ongoing storage problems. Which is the BEST technical solution?
    Correct Answer: D

    The best technical solution to address the problem of collecting redundant and unusable data in a storage area network (SAN) is deduplication. Deduplication is a process that eliminates duplicate copies of repeating data, which directly tackles the issue of data redundancy. By identifying and removing duplicate data blocks, deduplication reduces the amount of data stored, thereby freeing up storage space. This is particularly effective in scenarios where large amounts of data redundancy are present, such as with backups and archives. Hence, deduplication is the most appropriate solution to the ongoing storage problems described.