A financial trading platform requires both high availability and strong non-repudiation for transactions. The current system uses a single database and digital signatures. The CISO is considering adding a blockchain-based audit log. Which outcome best describes the benefit of this addition?

It guarantees 100% availability because the ledger is distributed.

It eliminates the need for digital signatures because the blockchain itself proves authenticity.

It provides tamper-evident, distributed recording of transactions, enhancing integrity and non-repudiation without a single point of failure.

It reduces the need for access controls because the ledger is public.

A healthcare organization is required to maintain an audit trail of who accessed patient records and when. The CISO wants to ensure that the audit logs cannot be altered by administrators. Which control objective and implementation category best match this requirement?

Availability, implemented with administrative corrective controls such as log retention policies and backup procedures.

Integrity and non-repudiation, implemented with technical detective controls such as write-once-read-many (WORM) storage and digital signatures.

Confidentiality, implemented with physical preventive controls such as locked server racks and access badges.

Accountability, implemented with technical deterrent controls such as login banners and warning messages.

A healthcare organization must ensure that patient records transmitted between its main facility and a remote clinic cannot be altered during transmission and that the sender cannot later deny having sent the data. Which combination of security objectives and control types best addresses these requirements?

Confidentiality through encryption and availability through redundant network links

Integrity through a cryptographic hash and non-repudiation through a digital signature

Confidentiality through access controls and integrity through audit logs

Availability through load balancing and integrity through checksums

EC-CouncilCertified Chief Information Security Officer

Domain 2Objective 2

Security Control Types and Objectives CCISO Practice Questions (Page 8)

Part of the Information Security Controls and Audit Management domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

4concepts

Questions 36–40

36expert · hard
A financial trading platform requires both high availability and strong non-repudiation for transactions. The current system uses a single database and digital signatures. The CISO is considering adding a blockchain-based audit log. Which outcome best describes the benefit of this addition?
Select an answer first
37application · medium
A healthcare organization is required to maintain an audit trail of who accessed patient records and when. The CISO wants to ensure that the audit logs cannot be altered by administrators. Which control objective and implementation category best match this requirement?
Select an answer first
38foundation · easy
Which security control objective ensures that data has not been altered or destroyed by unauthorized parties?
Select an answer first
39application · easy
A hospital's electronic health record (EHR) system must be available 24/7 for emergency care. The IT team implements redundant servers, backup power, and failover clustering. Which security objective is primarily being addressed?
Select an answer first
40application · medium
A healthcare organization must ensure that patient records transmitted between its main facility and a remote clinic cannot be altered during transmission and that the sender cannot later deny having sent the data. Which combination of security objectives and control types best addresses these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Security Control Types and Objectives CCISO Practice Questions (Page 8)

Questions 36–40

A financial trading platform requires both high availability and strong non-repudiation for transactions. The current system uses a single database and digital signatures. The CISO is considering adding a blockchain-based audit log. Which outcome best describes the benefit of this addition?

A healthcare organization is required to maintain an audit trail of who accessed patient records and when. The CISO wants to ensure that the audit logs cannot be altered by administrators. Which control objective and implementation category best match this requirement?

Which security control objective ensures that data has not been altered or destroyed by unauthorized parties?

A hospital's electronic health record (EHR) system must be available 24/7 for emergency care. The IT team implements redundant servers, backup power, and failover clustering. Which security objective is primarily being addressed?

Keep studying — Information Security Controls and Audit Management