A Security Administrator Is Developing Controls for Creating Audit Trails

question 1114

Multiple Choice

A security administrator is developing controls for creating audit trails and tracking if a PHI data breach is to occur. The administrator has been given the following requirements: All access must be correlated to a user account. All user accounts must be assigned to a single individual. User access to the PHI data must be recorded. Anomalies in PHI data access must be reported. Logs and records cannot be deleted or modified. Which of the following should the administrator implement to meet the above requirements? (Choose three.)

• A) Eliminate shared accounts.
• B) Create a standard naming convention for accounts.
• C) Implement usage auditing and review.
• D) Enable account lockout thresholds.
• E) Copy logs in real time to a secured WORM drive.
• F) Implement time-of-day restrictions.
• G) Perform regular permission audits and reviews.

---

Definitions:

Sales Call

A communication, typically by phone or in person, initiated by a salesperson or entity to potential customers with the objective of selling a product or service.

Truth-in-Lending Act

A national regulation aiming to encourage knowledgeable utilization of consumer credit through mandatory disclosures regarding its conditions and expenses.

Natural Person

A human being, as opposed to a legal entity such as a corporation, recognized as a legal subject with rights and obligations.

Real Estate Transactions

Legal agreements involving the transfer of ownership or rights in real property from one party to another.