Network Security Controls - Administrative Controls CCT Practice Questions (Page 12)

Questions 56–60

1. 56application · medium

   A company is developing a security policy for remote work. The policy must be enforceable and align with the company's risk tolerance. Which component is essential for the policy to be effective?

   • AA statement of management support and consequences for non-compliance.
   • BA detailed technical guide for configuring VPN clients.
   • CA baseline configuration for all remote devices.
   • DA list of recommended VPN vendors for employees to choose from.
   Reveal Solution Discussion Select an answer first
2. 57application · medium

   A regional bank must comply with a new data protection regulation that requires encryption of customer data at rest and in transit. The bank's security team is drafting a document that will define the mandatory encryption algorithms, key lengths, and allowed protocols for all systems. Which type of document should they create?

   • AA security procedure that outlines step-by-step steps to configure encryption
   • BA security guideline that recommends best practices for encryption
   • CA security policy that states the bank's commitment to protecting customer data
   • DA security standard that specifies mandatory technical configurations and algorithms
   Reveal Solution Discussion Select an answer first
4. 58expert · hard

   A financial firm has a small IT team. One administrator is responsible for approving all changes to the production environment, and the same administrator also implements the changes. Management is concerned about the lack of oversight. What is the BEST way to implement separation of duties given the small team size?

   • ADocument all changes after they are implemented
   • BGive the administrator full access to all systems to speed up changes
   • CRequire that a second person, such as a manager, review and approve all change requests before implementation
   • DAllow the administrator to continue as before because the team is too small
   Reveal Solution Discussion Select an answer first
5. 59foundation · easy

   Which topic is commonly covered in security awareness training?

   • AHow to recognize phishing emails
   • BHow to perform a penetration test
   • CHow to write security policies
   • DHow to configure a firewall
   Reveal Solution Discussion Select an answer first
6. 60foundation · easy

   Which component is typically included in an incident response plan?

   • AA marketing strategy for the company
   • BA list of approved software vendors
   • CRoles and responsibilities of the incident response team
   • DA list of employee salaries
   Reveal Solution Discussion Select an answer first