A network administrator needs to upgrade the firmware on a critical firewall. The change could affect network availability. According to change management principles, what should the administrator do BEFORE applying the change?

Apply the change immediately to minimize downtime

Inform users after the change is complete

Only document the change after it is done

Submit a change request for review and approval

A company's security policy requires that all changes to firewall rules be approved by the security manager. The network team has been making changes without approval, and the security manager wants to verify that the policy is being followed. Which administrative control would best provide this verification?

Send a reminder email to the network team about the approval policy.

Ask the network team to self-report any unauthorized changes at the end of each month.

Disable the network team's ability to make any firewall changes.

Conduct regular audits of firewall rule changes and compare them against the approved change records.

A company's headquarters is located in a region prone to earthquakes. The business continuity plan (BCP) relies on a backup site in the same city. After a risk assessment, the company realizes that a major earthquake could destroy both the primary and backup sites. Which improvement to the BCP would best address this risk?

Establish a backup site in a different geographic region that is not prone to the same disaster.

Increase the frequency of data backups from daily to hourly.

Purchase earthquake insurance for the backup site.

Conduct more frequent BCP tests at the current backup site.

EC-CouncilCertified Security Specialist

Domain 1Objective 3

Administrative Security Controls ECSS Practice Questions (Page 6)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

59questions here

12free pages

12concepts

12 Concepts in This Objective

Definition and Purpose of Administrative Controls
Security Policies
Security Standards and Baselines
Security Procedures and Guidelines
Risk Management and Assessment
Security Awareness and Training
Separation of Duties and Least Privilege
Incident Response and Reporting
Compliance and Legal Requirements
Auditing and Monitoring
Change Management
Business Continuity and Disaster Recovery Planning

Questions 26–30

26application · medium
A network administrator needs to upgrade the firmware on a critical firewall. The change could affect network availability. According to change management principles, what should the administrator do BEFORE applying the change?
Select an answer first
27application · medium
A security administrator is configuring new Windows servers. To ensure consistent and secure configurations across the fleet, the administrator needs a document that specifies the exact security settings, such as password length and audit policy, that must be applied. Which document should be referenced?
Select an answer first
28application · medium
A company's security policy requires that all changes to firewall rules be approved by the security manager. The network team has been making changes without approval, and the security manager wants to verify that the policy is being followed. Which administrative control would best provide this verification?
Select an answer first
29application · medium
A company's headquarters is located in a region prone to earthquakes. The business continuity plan (BCP) relies on a backup site in the same city. After a risk assessment, the company realizes that a major earthquake could destroy both the primary and backup sites. Which improvement to the BCP would best address this risk?
Select an answer first
30application · medium
A financial company wants to prevent an employee from both initiating and approving a large wire transfer. Which administrative control should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Administrative Security Controls ECSS Practice Questions (Page 6)

Questions 26–30

A network administrator needs to upgrade the firmware on a critical firewall. The change could affect network availability. According to change management principles, what should the administrator do BEFORE applying the change?

A financial company wants to prevent an employee from both initiating and approving a large wire transfer. Which administrative control should be implemented?

Keep studying — Network Defense Fundamentals and Controls