Question 510
A confidential customer migration portal accepts passwords without any second-factor requirement despite policy. Which project-management response BEST addresses the stated need?
Explanation
Correct Answer
Apply appropriate multifactor authentication and task-scoped permissions to project systems that contain sensitive data. This targets the specific project decision. MFA reduces reliance on a password alone; least privilege separately limits what a successfully authenticated identity may do. Before committing, assess: Inspect account roles, authentication-method policies, sign-in records, dormant permissions, and shared credentials. Situation: A confidential customer migration portal accepts passwords without any second-factor requirement despite policy.
Incorrect Answers
Classify project records by sensitivity and restrict access to people with a genuine business need rather than making all collaboration files public. That response is associated with Data classification and need-to-know permissions and does not directly settle this case. Its relevant principle is: Classification labels sensitivity, while least-privilege and need-to-know controls determine authorized disclosure and access. The stated case instead calls for: Apply appropriate multifactor authentication and task-scoped permissions to project systems that contain sensitive data. Situation: A confidential customer migration portal accepts passwords without any second-factor requirement despite policy.
Identify application-to-network-to-data dependencies and required connectivity when planning changes to multitiers IT infrastructure. That response is associated with Networking storage and tiered architecture dependencies and does not directly settle this case. Its relevant principle is: A multi-tier application separates presentation, business processing and data storage; changing one tier can affect others through network and interface dependencies. The stated case instead calls for: Apply appropriate multifactor authentication and task-scoped permissions to project systems that contain sensitive data. Situation: A confidential customer migration portal accepts passwords without any second-factor requirement despite policy.
Identify personal and health information in project datasets, minimize unnecessary exposure and map handling to applicable policies. That response is associated with Personally identifiable information and health data and does not directly settle this case. Its relevant principle is: PII can identify people, and PHI adds health-related sensitivity under applicable rules; naming data as test information does not automatically make it safe. The stated case instead calls for: Apply appropriate multifactor authentication and task-scoped permissions to project systems that contain sensitive data. Situation: A confidential customer migration portal accepts passwords without any second-factor requirement despite policy.


