A commercial OSINT provider utilizes and reviews data from various sources of publicly available information. The provider is transitioning the subscription service to a model that limit's the scope of available data based on subscription tier. Which of the following approaches would best ensure subscribers are only granted access to data associated with their tier? (Choose two.)

A. Storing collected data on separate physical media per tier

B. Controlling access to data based on the role of users

C. Employing attribute-based access control

D. Implementing a behavior-based IDS positioned at the storage network gateway

E. Establishing a classification and labeling scheme

F. Implementing a mandatory access control scheme




 

Suggested Answer: BC

Community Answer: BE



This question is in CAS-004 CompTIA Advanced Security Practitioner (CASP+) Exam
For getting CompTIA Advanced Security Practitioner (CASP+) Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by CompTIA. 
Trademarks, certification & product names are used for reference only and belong to CompTIA.
The website does not contain actual questions and answers from CompTIA's Certification Exams.