What is the purpose of the change management process?

To ensure changes are reviewed, approved, and documented before implementation

To allow anyone to make changes to systems

To eliminate the need for backups

To make changes quickly without approval to save time

An organization wants to verify that employees are following the security policy and to detect any unauthorized access to sensitive systems. Which administrative control should be implemented?

Implementing a password manager

Regular security audits and log reviews

A startup company has grown quickly and now has 50 employees. The founders want to establish a security program but have limited budget and no dedicated security staff. Which approach best demonstrates the use of administrative controls to build a security foundation?

Purchase a next-generation firewall and install it at the network perimeter.

Develop a set of security policies and procedures that define acceptable use, data handling, and incident reporting.

Implement a security information and event management (SIEM) system to collect logs.

Hire a penetration testing firm to conduct a one-time vulnerability assessment.

EC-CouncilCertified Security Specialist

Domain 1Objective 3

Administrative Security Controls ECSS Practice Questions (Page 1)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

59questions here

12free pages

12concepts

12 Concepts in This Objective

Definition and Purpose of Administrative Controls
Security Policies
Security Standards and Baselines
Security Procedures and Guidelines
Risk Management and Assessment
Security Awareness and Training
Separation of Duties and Least Privilege
Incident Response and Reporting
Compliance and Legal Requirements
Auditing and Monitoring
Change Management
Business Continuity and Disaster Recovery Planning

Questions 1–5

1foundation · easy
What is the first step in the risk management process?
Select an answer first
2foundation · easy
What is the purpose of the change management process?
Select an answer first
3application · medium
An organization wants to verify that employees are following the security policy and to detect any unauthorized access to sensitive systems. Which administrative control should be implemented?
Select an answer first
4foundation · easy
In an incident response plan, what is typically the first step?
Select an answer first
5application · medium
A startup company has grown quickly and now has 50 employees. The founders want to establish a security program but have limited budget and no dedicated security staff. Which approach best demonstrates the use of administrative controls to build a security foundation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Administrative Security Controls ECSS Practice Questions (Page 1)

Questions 1–5

What is the first step in the risk management process?

What is the purpose of the change management process?

An organization wants to verify that employees are following the security policy and to detect any unauthorized access to sensitive systems. Which administrative control should be implemented?

In an incident response plan, what is typically the first step?

A startup company has grown quickly and now has 50 employees. The founders want to establish a security program but have limited budget and no dedicated security staff. Which approach best demonstrates the use of administrative controls to build a security foundation?

Keep studying — Network Defense Fundamentals and Controls