A company's risk assessment identifies that employees frequently leave their laptops unattended in public areas, risking data exposure. The security team wants to implement a control that reduces the likelihood of this behavior. Which control would best address this risk?

Require a BIOS password on all laptops

Install tracking software on each laptop

Implement a policy requiring laptops to be locked with a cable lock when unattended

A company's risk assessment identifies that employees use weak passwords, making accounts vulnerable to brute-force attacks. The security team wants to implement a control that reduces the likelihood of successful attacks without causing excessive user friction. Which control is most appropriate?

Implement multi-factor authentication (MFA)

Disable account lockout after failed attempts

Require complex passwords and force changes every 30 days

Use a password manager and enforce a minimum length of 8 characters

EC-CouncilAssociate C|CISO

Domain 2Objective 2

Security Control Types and Objectives ACCISO Practice Questions (Page 3)

Part of the Information Security Controls and Audit Management domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 2–3 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

4concepts

Questions 11–15

11foundation · easy
Which security control objective is most directly supported by implementing digital signatures on electronic contracts?
Select an answer first
12application · medium
A company's risk assessment identifies that employees frequently leave their laptops unattended in public areas, risking data exposure. The security team wants to implement a control that reduces the likelihood of this behavior. Which control would best address this risk?
Select an answer first
13application · medium
A company's security team installs CCTV cameras in the parking lot and posts signs warning that the area is under surveillance. Which control types are these measures?
Select an answer first
14application · medium
A small business cannot afford a full-time security team. To mitigate the risk of undetected intrusions, they subscribe to a managed detection and response (MDR) service that monitors their network 24/7 and alerts them to suspicious activity. Which control type does this service primarily provide?
Select an answer first
15expert · hard
A company's risk assessment identifies that employees use weak passwords, making accounts vulnerable to brute-force attacks. The security team wants to implement a control that reduces the likelihood of successful attacks without causing excessive user friction. Which control is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.

Security Control Types and Objectives ACCISO Practice Questions (Page 3)

Questions 11–15

Which security control objective is most directly supported by implementing digital signatures on electronic contracts?

A company's risk assessment identifies that employees frequently leave their laptops unattended in public areas, risking data exposure. The security team wants to implement a control that reduces the likelihood of this behavior. Which control would best address this risk?

A company's security team installs CCTV cameras in the parking lot and posts signs warning that the area is under surveillance. Which control types are these measures?

A small business cannot afford a full-time security team. To mitigate the risk of undetected intrusions, they subscribe to a managed detection and response (MDR) service that monitors their network 24/7 and alerts them to suspicious activity. Which control type does this service primarily provide?

A company's risk assessment identifies that employees use weak passwords, making accounts vulnerable to brute-force attacks. The security team wants to implement a control that reduces the likelihood of successful attacks without causing excessive user friction. Which control is most appropriate?

Keep studying — Information Security Controls and Audit Management