Network Security Controls - Administrative Controls CCT Practice Questions (Page 11)

Questions 51–55

1. 51application · medium

   After a phishing attack, several employees clicked a malicious link and entered their credentials. The security team wants to reduce the likelihood of this happening again. Which combination of administrative controls would be most effective?

   • AConduct security awareness training and run simulated phishing campaigns to reinforce the training.
   • BImplement multi-factor authentication and require password changes every 30 days.
   • CDeploy an email filter and block known malicious domains.
   • DUpdate the incident response plan and conduct a post-incident review.
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   What is the first step in creating a security procedure?

   • ATrain all employees on the procedure
   • BPurchase new security software
   • CConduct a security audit
   • DIdentify the policy or standard that the procedure will support
   Reveal Solution Discussion Select an answer first
4. 53application · medium

   A company's security policy states that 'all remote access must be encrypted.' The IT team is creating a document that tells administrators exactly which encryption protocols and key lengths are acceptable for VPN connections. What type of document should they create?

   • AA security guideline that recommends best practices for VPN configuration.
   • BA security standard that specifies mandatory encryption protocols and key lengths.
   • CA security baseline that lists the minimum acceptable configuration for all network devices.
   • DA security procedure that outlines step-by-step steps for configuring a VPN client.
   Reveal Solution Discussion Select an answer first
5. 54application · medium

   A company is preparing for an external audit to demonstrate compliance with a data protection regulation. The auditor will need to verify that the company has implemented appropriate security controls. Which of the following would BEST support the audit process?

   • AEnsuring that all employees have the same level of access to simplify auditing
   • BMaintaining up-to-date documentation of security policies, standards, and procedures
   • CDeleting old logs to free up storage space
   • DProviding auditors with only verbal explanations of security practices
   Reveal Solution Discussion Select an answer first
6. 55application · medium

   A network administrator needs to apply a critical security patch to a firewall that also handles remote-access VPN for the company. The change window is limited to 30 minutes, and the patch cannot be rolled back easily. What should the administrator do before making the change?

   • ASchedule the change during off-peak hours to minimize user impact.
   • BTake a configuration backup and verify that the backup can be restored on a test unit.
   • CDocument the change in the change-management system and obtain approval from the change advisory board.
   • DInform the help desk about the change so they can handle user complaints.
   Reveal Solution Discussion Select an answer first