A software development company is concerned about insider threats from employees with access to source code. The security team wants to detect unauthorized data exfiltration. Which control would best meet this objective?

Install security cameras in the office to monitor employee activity

Implement a strict background check process for all new hires

Deploy a Data Loss Prevention (DLP) system that monitors and blocks outbound transfers of sensitive data

Require employees to sign a non-disclosure agreement (NDA)

A hospital is implementing a new EHR system. The security team must ensure that patient data is encrypted in transit and at rest, that access is logged, and that staff receive privacy training. Which control categories are being implemented?

Deterrent, compensating, and directive

Confidentiality, integrity, and availability

Preventive, detective, and corrective

Technical, administrative, and physical

EC-CouncilAssociate C|CISO

Domain 2Objective 2

Security Control Types and Objectives ACCISO Practice Questions (Page 2)

Part of the Information Security Controls and Audit Management domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 2–3 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

4concepts

Questions 6–10

6foundation · easy
A company installs biometric scanners at the entrance to its data center. This is an example of which category of security control?
Select an answer first
7application · medium
A software development company is concerned about insider threats from employees with access to source code. The security team wants to detect unauthorized data exfiltration. Which control would best meet this objective?
Select an answer first
8expert · hard
A hospital is implementing a new EHR system. The security team must ensure that patient data is encrypted in transit and at rest, that access is logged, and that staff receive privacy training. Which control categories are being implemented?
Select an answer first
9foundation · easy
Which security control objective ensures that data has not been altered or tampered with by unauthorized parties?
Select an answer first
10foundation · easy
Which of the following is an example of a technical control?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.

Security Control Types and Objectives ACCISO Practice Questions (Page 2)

Questions 6–10

A company installs biometric scanners at the entrance to its data center. This is an example of which category of security control?

A software development company is concerned about insider threats from employees with access to source code. The security team wants to detect unauthorized data exfiltration. Which control would best meet this objective?

A hospital is implementing a new EHR system. The security team must ensure that patient data is encrypted in transit and at rest, that access is logged, and that staff receive privacy training. Which control categories are being implemented?

Which security control objective ensures that data has not been altered or tampered with by unauthorized parties?

Which of the following is an example of a technical control?

Keep studying — Information Security Controls and Audit Management