Question Bank Coverage & Diagnostic Map
Verified count and difficulty
| Metric |
Count |
| Total questions |
56 |
| Foundational |
10 |
| Standard |
32 |
| Difficult |
13 |
| Expert-discrimination |
1 |
Correct-answer balance
| Position |
Count |
| A |
14 |
| B |
14 |
| C |
14 |
| D |
14 |
Topic coverage
| Topic |
Questions |
| Introduction |
4 |
| Principles & Risk |
8 |
| Access & Monitoring |
8 |
| Masking & Restrictions |
8 |
| System Risks |
8 |
| Activities & Policy |
8 |
| Tools & Techniques |
4 |
| Implementation & Governance |
8 |
Cognitive coverage
| Cognitive type |
Questions |
| Recall |
12 |
| Understand |
9 |
| Distinguish |
16 |
| Apply |
19 |
- Data Security vs infrastructure-only security
- Requirement vs control
- Vulnerability vs Threat vs Risk
- Risk classification vs Confidentiality
- Authentication vs Authorization
- Authorization vs Entitlement
- Active vs Passive monitoring
- Monitoring vs Audit
- Integrity vs Confidentiality
- Private-key vs Public-key encryption
- Persistent vs Dynamic masking
- In-flight vs In-place masking
- Key masking vs ordinary randomization
- Confidentiality vs Regulation
- Highest confidentiality vs additive regulatory categories
- Restricted vs Registered Confidential
- Excessive vs Legitimate-privilege abuse
- Excessive privilege vs Elevation
- Service vs Shared account
- IDS vs IPS
- SQL injection vs Phishing/Malware
- Virus vs Worm
- Policy vs Standard
- Role Grid vs Role Hierarchy
- CRUD/CRUDE vs RACI
- Policy statement vs auditable evidence
- Immediate vs periodic patching
- Metadata tracking vs sanitization
- Outsourced control vs retained accountability
- Cloud shared responsibility vs unclear accountability
- Security architecture vs technical inventory
- Actionable vs vanity metrics
- Protection strength vs Confidential Data Proliferation
Artifact 08 remains empty until actual study performance produces repeatable errors, slow retrieval, or low-confidence distinctions.
← Answers 043–056 · Teach-Back →