@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix edu: <https://knobit.org/def/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix schema: <https://schema.org/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

<https://knobit.org/id/task/dsec-access-control/I2> a edu:Question ;
    rdfs:label "I2 (1.5 points)"@en ;
    dcterms:license <https://creativecommons.org/licenses/by/4.0/> ;
    owl:sameAs <https://bitbucket.org/reffa/ontology/id/task/dsec-access-control/I2> ;
    schema:hasPart <https://knobit.org/id/register/data-security#SE-309>,
        <https://knobit.org/id/register/data-security#SE-310>,
        <https://knobit.org/id/register/data-security#SE-311> ;
    schema:identifier "I2" ;
    schema:position 4 ;
    schema:text "0.5 each. (a) ANALYST holds export_customer_list, which no data analyst duty needs. (b) DBA holds read_personal_code: administrators do not read customer data in clear; break-glass covers incidents. (c) SVC_REPORTING is a shared interactive login with admin rights: replaced by personal accounts and a non-interactive service account without admin."@en .

edu:Question rdfs:label "Question"@en,
        "Küsimus"@et .

<https://knobit.org/id/register/data-security#SE-309> rdfs:label "dsec-access-control I2: the analyst can export the full customer list"@en .

<https://knobit.org/id/register/data-security#SE-310> rdfs:label "dsec-access-control I2: the DBA reads personal codes"@en .

<https://knobit.org/id/register/data-security#SE-311> rdfs:label "dsec-access-control I2: a shared privileged reporting account"@en .