Câu 6: CT-SEC: Certified Tester Security Tester

Scenario:An international health insurance company has an advanced management system for its services that can be accessed by different types of stakeholders. As a consequence of a deficiency in the security requirements for a new module, a data access monitoring process has not been implemented for the stakeholders involved in customer management. This feature implies that, every time any corporate stakeholder accesses a customer’s data, a record must be kept identifying the user, date and time of access as well as the reason(s) for accessing this data.Question:Based on the above scenario, which TWO aspects associated with the requirements could be impacted by the implementation of the solution? (Choose two.)

1. A. Privacy — đáp án hiện tại
2. B. Compliance Needs — đáp án hiện tại
3. C. Interoperability
4. D. Testability
5. E. Usability