What is the primary focus of business continuity planning (BCP)?

Restoring IT systems and infrastructure after a disaster

Preventing all security incidents from occurring

Transferring risk to insurance providers

Maintaining critical business operations during and after a disruption

A healthcare organization is updating its security documentation to align with HIPAA. The compliance officer wants to ensure that employees know the specific steps to follow when handling patient data on portable devices. Which type of document should be created to provide the detailed step-by-step instructions?

A guideline that suggests best practices for mobile device usage

A security policy that states the organization's commitment to protecting patient data

A procedure that outlines the exact sequence of actions for encrypting and transferring patient data

A standard that specifies the required encryption algorithms for portable devices

Which sequence best represents the risk management process?

Monitoring, mitigation, assessment, identification

Identification, assessment, mitigation, monitoring

Mitigation, identification, assessment, monitoring

Assessment, identification, monitoring, mitigation

EC-CouncilCertified Ethical Hacker

Domain 1Objective 7

Information Assurance and Risk Management CEH Practice Questions (Page 4)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

8concepts

Questions 16–20

16foundation · easy
Which framework is primarily focused on IT governance and aligning IT processes with business objectives?
Select an answer first
17foundation · easy
What is the primary focus of business continuity planning (BCP)?
Select an answer first
18application · medium
A healthcare organization is updating its security documentation to align with HIPAA. The compliance officer wants to ensure that employees know the specific steps to follow when handling patient data on portable devices. Which type of document should be created to provide the detailed step-by-step instructions?
Select an answer first
19application · medium
A small business has a limited security budget and has identified a risk of data loss due to ransomware. The business decides to purchase cyber insurance to cover the cost of a potential ransom and recovery. Which risk treatment strategy is the business applying?
Select an answer first
20foundation · easy
Which sequence best represents the risk management process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Information Assurance and Risk Management CEH Practice Questions (Page 4)

Questions 16–20

Which framework is primarily focused on IT governance and aligning IT processes with business objectives?

What is the primary focus of business continuity planning (BCP)?

A small business has a limited security budget and has identified a risk of data loss due to ransomware. The business decides to purchase cyber insurance to cover the cost of a potential ransom and recovery. Which risk treatment strategy is the business applying?

Which sequence best represents the risk management process?

Keep studying — Information Security and Ethical Hacking Overview