A security auditor is reviewing the access logs of a file server and notices that a user's account was used to access a confidential file at 3:00 AM. The user is a daytime employee and has no reason to access the file. What should the auditor do first?

Disable the user's account immediately

Report the incident to the incident response team

Verify the log entry and check for other suspicious activity

Contact the user and ask if they accessed the file

A company is implementing a new file server. The security team must ensure that only the finance department can access the 'financial reports' folder. The finance department has a security group in Active Directory. Which access control mechanism should be used?

Use a firewall rule to restrict access to the folder to Finance department IP addresses

Set NTFS permissions on the folder to allow 'Finance' group and deny 'Everyone'

Set share permissions to allow 'Finance' group and deny 'Everyone'

Use a capability list to grant the Finance group access to the folder

EC-CouncilAssociate C|CISO

Domain 4Objective 1

Access Controls ACCISO Practice Questions (Page 8)

Part of the Information Security Core Competencies domain, which makes up ~31% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–25 in this domain), expect 2–3 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

6concepts

Questions 36–37

36application · medium
A security auditor is reviewing the access logs of a file server and notices that a user's account was used to access a confidential file at 3:00 AM. The user is a daytime employee and has no reason to access the file. What should the auditor do first?
Select an answer first
37expert · medium
A company is implementing a new file server. The security team must ensure that only the finance department can access the 'financial reports' folder. The finance department has a security group in Active Directory. Which access control mechanism should be used?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.

Access Controls ACCISO Practice Questions (Page 8)

Questions 36–37

A security auditor is reviewing the access logs of a file server and notices that a user's account was used to access a confidential file at 3:00 AM. The user is a daytime employee and has no reason to access the file. What should the auditor do first?

A company is implementing a new file server. The security team must ensure that only the finance department can access the 'financial reports' folder. The finance department has a security group in Active Directory. Which access control mechanism should be used?

Keep studying — Information Security Core Competencies