Which activity is an example of security monitoring?

Reviewing system logs for suspicious activity

A manufacturing company is evaluating its risk exposure. A recent assessment identified that a failure in the production scheduling system would halt the entire plant for up to two days. The company's leadership wants to reduce this risk to an acceptable level. Which approach is an example of a risk mitigation strategy?

Accept the risk because the plant has never experienced a scheduling system failure.

Document the risk in the annual report and take no further action.

Purchase an insurance policy that covers lost production revenue.

Implement a redundant scheduling system that can take over automatically if the primary fails.

A system administrator discovers that a server has been compromised. According to the organization's incident response plan, the administrator must report the incident to the incident response team. What is the MOST important information to include in the initial report?

The estimated cost of the incident

The time of discovery and a summary of the suspected compromise

The full forensic analysis of the attack

The names of all employees who have access to the server

What is the primary goal of business continuity planning?

To replace the need for incident response

To restore IT systems after a disaster

To ensure critical business functions can continue during and after a disruption

To prevent all security incidents

Why is documentation important in incident response?

It eliminates the need for technical controls

It is only needed for incidents involving data breaches

It guarantees that incidents will not recur

It provides a record of actions taken and supports legal and regulatory requirements

EC-CouncilCertified Security Specialist

Domain 1Objective 3

Administrative Security Controls ECSS Practice Questions (Page 10)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

59questions here

12free pages

12concepts

12 Concepts in This Objective

Definition and Purpose of Administrative Controls
Security Policies
Security Standards and Baselines
Security Procedures and Guidelines
Risk Management and Assessment
Security Awareness and Training
Separation of Duties and Least Privilege
Incident Response and Reporting
Compliance and Legal Requirements
Auditing and Monitoring
Change Management
Business Continuity and Disaster Recovery Planning

Questions 46–50

46foundation · easy
Which activity is an example of security monitoring?
Select an answer first
47application · medium
A manufacturing company is evaluating its risk exposure. A recent assessment identified that a failure in the production scheduling system would halt the entire plant for up to two days. The company's leadership wants to reduce this risk to an acceptable level. Which approach is an example of a risk mitigation strategy?
Select an answer first
48application · medium
A system administrator discovers that a server has been compromised. According to the organization's incident response plan, the administrator must report the incident to the incident response team. What is the MOST important information to include in the initial report?
Select an answer first
49foundation · easy
What is the primary goal of business continuity planning?
Select an answer first
50foundation · easy
Why is documentation important in incident response?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.