A Security Administrator Is Developing Controls for Creating Audit Trails

question 1114

Multiple Choice

A security administrator is developing controls for creating audit trails and tracking if a PHI data breach is to occur. The administrator has been given the following requirements: All access must be correlated to a user account. All user accounts must be assigned to a single individual. User access to the PHI data must be recorded. Anomalies in PHI data access must be reported. Logs and records cannot be deleted or modified. Which of the following should the administrator implement to meet the above requirements? (Choose three.)

• A) Eliminate shared accounts.
• B) Create a standard naming convention for accounts.
• C) Implement usage auditing and review.
• D) Enable account lockout thresholds.
• E) Copy logs in real time to a secured WORM drive.
• F) Implement time-of-day restrictions.
• G) Perform regular permission audits and reviews.

---

Definitions:

Schedule A

A form used for itemizing deductions on a U.S. individual income tax return, including taxes paid, interest, gifts to charity, and other deductible expenses.

Property Tax

A rephrased definition: A levy on property that the owner is required to pay, usually collected by local governments, based on the property's value.

Sales Tax

A tax imposed by a government on the sale of goods and services.

Adjusted Gross Income

An individual's total gross income minus specific deductions, crucial for determining taxable income.