Network Security Controls - Administrative Controls CCT Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   How is least privilege applied when granting user access rights?

   • ABy granting all users the same level of access
   • BBy granting access only after a security incident
   • CBy granting access based on the user's role and job requirements
   • DBy granting access to all files for convenience
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company is implementing a security baseline for its servers. The baseline includes settings that are more restrictive than what some applications require. For example, the baseline disables legacy protocols that one application still needs. The application team is concerned that the baseline will break the application. What is the BEST approach?

   • ACreate an exception process that documents the business need and compensating controls
   • BApply the baseline to all servers and require the application team to update the application
   • CDo not apply the baseline to any server to avoid conflicts
   • DApply the baseline but disable the conflicting settings for all servers
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A network administrator needs to apply an urgent security patch to a critical database server. The change management policy requires all changes to be approved by the change advisory board (CAB), which meets weekly. The patch addresses a vulnerability that is actively being exploited in the wild. What should the administrator do?

   • AApply the patch immediately and document the change as an emergency change after the fact.
   • BApply the patch without any documentation because it is an emergency.
   • CWait for the next CAB meeting to get approval, even if it means the server remains vulnerable.
   • DAsk the database administrator to apply the patch without involving the change management process.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary purpose of separation of duties?

   • ATo allow employees to perform multiple roles for efficiency
   • BTo reduce the number of employees needed for security tasks
   • CTo ensure that all employees have the same level of access
   • DTo ensure that no single individual has excessive control over a critical process
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is the first step in handling a security incident according to most incident response frameworks?

   • ADetection and analysis
   • BEradication
   • CRecovery
   • DContainment
   Reveal Solution Discussion Select an answer first