You save $69.98
A policy-decision service goes offline and the privileged API defaults to granting all authenticated users access. What is the BEST protective behavior?
Fail-secure behavior prevents a control failure from becoming implicit unlimited permission.
Authentication is not authorization for each privileged resource request.
Network location is not a safe replacement for current access decisions.
Loss of audit evidence does not resolve the access-control failure.
A privileged API fails closed during a policy-server outage. What residual trade-off must be explicitly managed?
Failing securely protects confidentiality but can affect availability and mission-critical workflows.
A secure denial can coexist with unacceptable availability and recovery gaps.
MFA verifies identity but not present action-specific privileges.
Unbounded exceptions can defeat the security control they are intended to supplement.
Which fault-injection test BEST validates a fail-secure authorization design?
This tests both unknown-decision denial and safe mission recovery during actual control failure.
A configuration snapshot cannot prove runtime behavior on dependency failure.
Normal throughput reveals nothing about fail-closed behavior.
Login UI presence does not establish authorization enforcement at the protected API.
A production appliance exposes an unused sample administration API and an interactive debugging shell. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Removing unused attack surfaces decreases exploit paths regardless of patch level. A vulnerable component remaining enabled under an alternate route can defeat the intended reduction.
A moved port leaves unnecessary privileged functionality reachable.
Patching does not remove a superfluous attack-capable interface.
Banner text does not disable capabilities or enforce approved access.
The organization implemented the response to this scenario: A production appliance exposes an unused sample administration API and an interactive debugging shell. The approved response was: Disable unneeded capabilities and allow only approved services and administrative interfaces. Which statement MOST accurately identifies a remaining risk or constraint?
Removing unused attack surfaces decreases exploit paths regardless of patch level. Port and API inventories show only approved functions after the hardening baseline.
Attack-surface reduction requires inventory and tests of all reachable paths.
Unused functionality can still increase exposure regardless of patch status.
Presentation restrictions are not equivalent to removing the underlying attack surface.
Management implemented a response after this event: A production appliance exposes an unused sample administration API and an interactive debugging shell. The response was: Disable unneeded capabilities and allow only approved services and administrative interfaces. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
Port and API inventories show only approved functions after the hardening baseline. Removing unused attack surfaces decreases exploit paths regardless of patch level.
Changing the interface does not prove unused functions are disabled.
Patch compliance is not evidence of least functionality.
Documentation cannot substitute for observed hardening enforcement.
A database password is stolen and the attacker can also access backups because both trust the same broad identity. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Independent control layers reduce the blast radius when one secret or boundary fails. Layers sharing the same administrative root may fail together and need independence testing.
A shared trust root allows one stolen identity to compromise both production and recovery.
Encryption cannot provide an independent layer if the attacker controls its decryption authority.
Physical separation of directories does not isolate security administration or access permissions.
The organization implemented the response to this scenario: A database password is stolen and the attacker can also access backups because both trust the same broad identity. The approved response was: Separate identity privileges, encryption keys, network boundaries and backup custody to limit compromise. Which statement MOST accurately identifies a remaining risk or constraint?
Independent control layers reduce the blast radius when one secret or boundary fails. A compromised application credential cannot read protected recovery copies or unrelated data.
Shared credentials create correlated failure across nominally separate controls.
The cryptographic protection is defeated if the same exposed principal can obtain the key.
Independent physical destinations do not imply independent destructive authority.
Management implemented a response after this event: A database password is stolen and the attacker can also access backups because both trust the same broad identity. The response was: Separate identity privileges, encryption keys, network boundaries and backup custody to limit compromise. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
A compromised application credential cannot read protected recovery copies or unrelated data. Independent control layers reduce the blast radius when one secret or boundary fails.
Counts of layers do not establish independent trust boundaries.
Logical locations are not proof of least privilege or recovery isolation.
The decisive test is whether a compromised layer can cross into supposedly independent recovery custody.
A facial-recognition pilot plans to collect full-resolution video indefinitely to compute short-lived occupancy counts. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Embedding privacy requirements early avoids relying entirely on downstream access reviews. Aggregate statistics can still leak identities in small groups and require disclosure-risk assessment.
Access limitations cannot replace minimizing information that is not necessary for occupancy statistics.
Delayed deidentification leaves unnecessary personal images retained in the original archive.
Broad notice alone does not establish necessary collection, proportional retention or lawful reuse.
The organization implemented the response to this scenario: A facial-recognition pilot plans to collect full-resolution video indefinitely to compute short-lived occupancy counts. The approved response was: Redesign collection to minimize identifiers and define short retention and restricted purpose from the outset. Which statement MOST accurately identifies a remaining risk or constraint?
Embedding privacy requirements early avoids relying entirely on downstream access reviews. Data inventory proves only necessary inputs are retained for the approved period and purpose.
Small groups and auxiliary information can enable reidentification or sensitive inference.
Downstream controls do not remove the exposure from unnecessary original capture.
A limited initial purpose does not authorize unrelated future processing.
or Guarantee your success by buying the full version which covers the full latest pool of questions. (484 Questions, Last Updated on Oct 31, 2026)
Please check your mailbox for a message from support@examlabs.com and follow the directions.
