Refer to the information below to answer the question.
A large organization uses unique identifiers and requires them at the start of every system session. Application access is based on job classification. The organization is subject to periodic independent reviews of access controls and violations. The organization uses wired and wireless networks and remote access. The organization also uses secure connections to branch offices and secure backup and recovery strategies for selected information and processes.
Following best practice, where should the permitted access for each department and job classification combination be specified?

Which of the following effectively doubles the amount of hard drives needed but also provides redundancy?

Encryption is applicable to all of the following OSI/ISO layers except:

Which of the following is BEST achieved through the use of eXtensible Access Markup Language (XACML)?

Which of the following determines how traffic should flow based on the status of the infrastructure layer?