Administrative Security Controls ECSS Practice Questions (Page 11)

Questions 51–55

1. 51foundation · easy

   Which of the following is an example of an administrative security control?

   • AA biometric scanner at the data center entrance
   • BA security awareness training program for employees
   • CAn intrusion prevention system that blocks malicious packets
   • DA network firewall that filters incoming traffic
   Reveal Solution Discussion Select an answer first
2. 52expert · hard

   An organization's security team discovers that a privileged user has been accessing sensitive files outside of normal working hours. The team suspects malicious activity but is unsure. The organization has a strict privacy policy that limits monitoring of employee activity. What is the BEST course of action?

   • AImmediately terminate the user's access without further investigation
   • BIgnore the activity because monitoring is restricted by policy
   • CInitiate a formal investigation following the organization's incident response and monitoring procedures, ensuring any monitoring complies with policy and legal requirements
   • DPublicly warn all employees about the incident
   Reveal Solution Discussion Select an answer first
4. 53application · medium

   A company wants to ensure it can continue critical operations if its main data center is destroyed by a fire. The security team is tasked with developing a plan. What should be the FIRST step in this planning process?

   • APurchase backup hardware and software
   • BNotify employees of the plan
   • CTest the disaster recovery plan
   • DConduct a business impact analysis to identify critical functions and recovery priorities
   Reveal Solution Discussion Select an answer first
5. 54application · medium

   An organization has experienced several security incidents caused by employees clicking on malicious links. The security manager wants to reduce these incidents by changing employee behavior. Which administrative control is most directly aimed at this goal?

   • AIncident response retainer
   • BNetwork firewall upgrade
   • CSecurity awareness and training program
   • DData loss prevention software
   Reveal Solution Discussion Select an answer first
6. 55application · medium

   A healthcare organization must comply with data protection regulations that require patient data to be kept confidential and secure. The organization is designing its administrative controls. Which action is MOST directly required to meet this compliance obligation?

   • APurchasing additional storage capacity
   • BCreating a marketing plan for patient services
   • CDeploying a public cloud for all patient data
   • DImplementing a security policy that defines data handling and access rules
   Reveal Solution Discussion Select an answer first