Which characteristic is essential for an effective security procedure?

It is reviewed only once during creation

It includes clear, step-by-step instructions

It is vague enough to allow flexibility

It is written in technical jargon only

What is the purpose of a security baseline?

To replace the need for security policies

To provide a high-level statement of management intent

To define the minimum acceptable security configuration for systems

To list step-by-step instructions for incident response

A company has experienced several phishing attacks that tricked employees into revealing their credentials. Management wants to reduce the likelihood of successful phishing in the future. Which administrative control would be MOST effective in addressing this human error?

Implementing a firewall to block malicious emails

Conducting regular security awareness training that includes simulated phishing exercises

Disabling all email attachments for all users

Increasing the password complexity requirement

A company has just experienced a ransomware attack that encrypted critical file servers. The incident response team is activating the incident response plan. Which of the following is the FIRST step they should take according to a typical incident response process?

Eradicate the malware by wiping and reinstalling all affected systems

Recover systems from backups and restore normal operations

Identify and confirm that an incident has occurred by analyzing alerts and indicators

Contain the incident by isolating affected systems from the network

EC-CouncilCertified Cybersecurity Technician

Domain 2Objective 2

Network Security Controls - Administrative Controls CCT Practice Questions (Page 10)

Part of the Identity and Network Security Controls domain, which makes up ~20% of our current practice bank.

61questions here

13free pages

13concepts

13 Concepts in This Objective

Administrative Controls Overview
Security Policies
Security Standards and Baselines
Security Procedures
Security Guidelines
Risk Management
Security Awareness Training
Separation of Duties
Least Privilege Principle
Change Management
Incident Response Planning
Business Continuity and Disaster Recovery
Compliance and Auditing

Questions 46–50

46foundation · easy
Which document provides the highest-level direction for an organization's security program?
Select an answer first
47foundation · easy
Which characteristic is essential for an effective security procedure?
Select an answer first
48foundation · easy
What is the purpose of a security baseline?
Select an answer first
49application · medium
A company has experienced several phishing attacks that tricked employees into revealing their credentials. Management wants to reduce the likelihood of successful phishing in the future. Which administrative control would be MOST effective in addressing this human error?
Select an answer first
50application · medium
A company has just experienced a ransomware attack that encrypted critical file servers. The incident response team is activating the incident response plan. Which of the following is the FIRST step they should take according to a typical incident response process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.