Network Security Controls - Administrative Controls CCT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What does the principle of least privilege state?

   • AUsers should have access to all resources to maximize productivity
   • BAccess should be granted based on seniority
   • CAdministrators should have more access than regular users
   • DUsers should have the minimum access necessary to perform their job
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   How do security standards help an organization?

   • AThey describe the organization's security vision
   • BThey provide mandatory rules for implementing security controls
   • CThey offer optional recommendations for improving security
   • DThey list the steps to respond to a security incident
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the main difference between a security guideline and a security standard?

   • AGuidelines are mandatory; standards are optional
   • BGuidelines are for users; standards are for administrators
   • CGuidelines are written by vendors; standards are written by the organization
   • DGuidelines are recommended practices; standards are mandatory requirements
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is conducting a risk assessment for its customer database. The database contains sensitive personal information. The team identifies that a successful ransomware attack could result in a loss of $500,000 and estimates the likelihood of such an attack in the next year at 10%. What is the annualized loss expectancy (ALE) for this risk?

   • A$500,000
   • B$50,000,000
   • C$5,000
   • D$50,000
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has just experienced a ransomware attack that encrypted several file servers. The incident response team is activated. According to a well-structured incident response plan, what should be the FIRST step the team takes?

   • AContain the incident by disconnecting the affected servers from the network.
   • BEradicate the ransomware by wiping and reinstalling the affected servers.
   • CRecover the data from backups and restore the servers to normal operation.
   • DIdentify the scope of the incident by determining which systems are affected and how the attack occurred.
   Reveal Solution Discussion Select an answer first