Administrative Security Controls ECSS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   The principle of least privilege means that users should be granted:

   • AAccess to all systems to maximize productivity
   • BThe same access as their supervisor
   • CTemporary access that is never reviewed
   • DOnly the minimum access necessary to perform their job functions
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An organization is updating its security documentation. The security team needs a document that provides high-level direction on the acceptable use of company resources and states management's commitment to security. Which document type should be created?

   • AA security procedure
   • BA security policy
   • CA security guideline
   • DA security baseline
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security administrator needs to apply a critical security patch to a production database server. The change management policy requires all changes to be approved by the change advisory board (CAB), but the next CAB meeting is in two weeks. The vulnerability is actively being exploited. What should the administrator do?

   • AApply the patch immediately without any approval
   • BDisconnect the database from the network and wait for approval
   • CRequest an emergency change approval through the expedited process defined in the change management policy
   • DWait for the next CAB meeting to approve the change
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company has just experienced a suspected data breach. The IT manager wants to ensure the incident is handled consistently and that evidence is preserved for potential legal action. Which action should be taken first?

   • AWait for the forensic investigator to arrive before taking any action.
   • BActivate the incident response plan and follow the documented reporting and evidence-handling procedures.
   • CNotify all employees to change their passwords immediately.
   • DImmediately shut down all affected systems to stop the breach.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A mid-sized company is formalizing its security program. The CISO wants to establish a governance framework that defines roles, responsibilities, and acceptable use expectations for all employees. Which administrative control should be implemented FIRST?

   • ADevelop and publish a set of security policies
   • BInstall endpoint protection on all workstations
   • CPurchase cyber liability insurance
   • DDeploy a network intrusion detection system
   Reveal Solution Discussion Select an answer first