Classification Drill — 20 Clues
Name the concept before checking the answer section.
- A login proves user identity. → __
- A manager approves access to salary data. → __
- Complete set of fields exposed by that approval. → __
- System blocks a suspicious query immediately. → __
- Weekly snapshots compared against baseline. → __
- Known unpatched software flaw. → __
- Malicious email attachment that may exploit it. → __
- Likelihood and business damage are evaluated. → __
- Data set inherits most restrictive internal secrecy level. → __
- Data set must satisfy three external legal/contractual action families. → __
- Test copy is permanently changed while moving from Production. → __
- Call center sees only last four digits; source stays full. → __
- User has access beyond job need. → __
- Valid user downloads data for improper purpose. → __
- Developer exploits a function and becomes administrator. → __
- Process/batch ID is reused by humans. → __
- Many humans use one generic login. → __
- System detects and notifies on intrusion. → __
- System automatically blocks a known attack. → __
- Map shows Responsible, Accountable, Consulted, Informed. → __
Answer key
- Authentication
- Authorization
- Entitlement
- Active monitoring
- Passive monitoring
- Vulnerability
- Threat
- Risk
- Confidentiality
- Regulatory categories
- In-flight persistent masking
- Dynamic masking
- Excessive privilege
- Legitimate-privilege abuse
- Privilege elevation
- Service-account abuse
- Shared-account abuse
- IDS
- IPS
- RACI
Changed-fact requirement
For every miss, alter one fact so the nearest confusion-pair answer becomes correct. That is more diagnostic than merely rereading the definition.