Network Security Controls - Administrative Controls CCT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization has a security policy that requires all employees to use encryption when sending sensitive emails. The IT team needs to create a document that explains exactly how to enable encryption in the company's email client. What type of document should they create?

   • AA security policy that states the requirement to encrypt emails
   • BA security standard that defines the encryption algorithm to use
   • CA security guideline that suggests best practices for email security
   • DA security procedure that provides step-by-step instructions for enabling encryption
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary goal of change management in security?

   • ATo make changes as quickly as possible
   • BTo ensure that changes do not introduce security vulnerabilities
   • CTo document changes after they are implemented
   • DTo prevent any changes from being made
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company is preparing for a compliance audit. The auditor wants to verify that the company's security policies are being followed. The company has a policy that requires all servers to be patched within 30 days of a patch release. The IT team has a patch management system that tracks patch status. What evidence should the company provide to the auditor?

   • AA report from the patch management system showing the patch status of each server and the dates patches were applied.
   • BA security baseline document that lists the required patch levels for each server.
   • CA security procedure that describes how patches are applied.
   • DA copy of the security policy and a signed statement from the IT manager that patching is being done.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company has a business continuity plan that requires the customer relationship management (CRM) system to be available within 2 hours of a disruption. The disaster recovery plan currently uses a backup that takes 4 hours to restore. The company has a limited budget and must choose a solution. Which option best meets the RTO?

   • ASwitch to a backup solution that restores in 3 hours, which is closer to the RTO.
   • BAccept the current backup because the RTO is only a guideline.
   • CImplement a warm standby site that can be activated within 1 hour, and keep the existing backup as a fallback.
   • DIncrease the RTO to 5 hours to match the current backup capability.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the role of administrative controls in facilitating security audits?

   • AThey prevent auditors from accessing sensitive data
   • BThey replace the need for external audits
   • CThey automatically generate audit reports
   • DThey provide the documentation and evidence that auditors review
   Reveal Solution Discussion Select an answer first