Network Security Controls - Administrative Controls CCT Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company must comply with a regulation that requires access logs to be retained for at least one year. During an audit, the auditor asks to see evidence that access logs are being reviewed regularly. Which administrative control would provide this evidence?

   • AA security baseline that specifies the log retention period.
   • BA security policy that states access logs must be reviewed monthly.
   • CA security procedure that describes how to review access logs.
   • DA log review checklist that is signed and dated by the reviewer each month.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A small company has one IT administrator who manages user accounts, assigns permissions, and also performs monthly audits of access logs. To reduce the risk of insider fraud, management wants to implement a control that prevents any single individual from having unchecked control over the entire access management process. What should they do?

   • AAssign the audit function to a different employee or an external auditor
   • BGrant the administrator full access to all systems to simplify management
   • CDocument all administrator actions in a log and review them quarterly
   • DRequire the administrator to use a strong password and enable multi-factor authentication
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which component is typically included in a security policy?

   • AA list of specific software versions to install
   • BStep-by-step instructions for configuring a firewall
   • CThe organization's security objectives and responsibilities
   • DA list of approved firewall vendors
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   How do administrative controls support compliance with regulations?

   • ABy documenting policies and procedures that demonstrate compliance
   • BBy eliminating the need for audits
   • CBy automatically blocking all non-compliant traffic
   • DBy encrypting all data at rest
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company has a security awareness training program, but recent phishing simulations show that employees still click on simulated phishing links at a high rate. Management wants to improve the effectiveness of the training. Which approach is MOST likely to reduce the click rate?

   • AProvide immediate feedback and additional training to employees who click on simulated phishing emails
   • BStop running phishing simulations because they are not working
   • CPunish employees who click on simulated phishing emails
   • DConduct training only once a year to avoid taking time away from work
   Reveal Solution Discussion Select an answer first