How do administrative controls support risk reduction?

By physically securing hardware

By encrypting all sensitive data

By automatically patching all software vulnerabilities

By establishing policies and procedures that reduce the likelihood or impact of risks

A global company must comply with the EU General Data Protection Regulation (GDPR) for its European customers. The company currently stores all customer data in a data center in the United States. A risk assessment shows that transferring personal data across borders may violate GDPR requirements. The company wants to continue serving European customers while ensuring compliance. Which approach best addresses the compliance risk?

Obtain consent from each European customer to store their data in the US.

Move European customer data to a data center located within the EU and implement appropriate safeguards for any transfers.

Encrypt all customer data in the US data center and argue that encryption makes the transfer compliant.

Stop storing any European customer data and delete it immediately.

What is the main purpose of a security policy?

To list recommended practices that are optional

To document step-by-step instructions for daily operations

To provide high-level direction and rules for protecting organizational assets

To specify the exact configuration settings for a server

Why is testing a disaster recovery plan important?

To replace the need for backups

To ensure the plan is never needed

To verify that the plan works and to identify gaps

EC-CouncilCertified Security Specialist

Domain 1Objective 3

Administrative Security Controls ECSS Practice Questions (Page 8)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

59questions here

12free pages

12concepts

12 Concepts in This Objective

Definition and Purpose of Administrative Controls
Security Policies
Security Standards and Baselines
Security Procedures and Guidelines
Risk Management and Assessment
Security Awareness and Training
Separation of Duties and Least Privilege
Incident Response and Reporting
Compliance and Legal Requirements
Auditing and Monitoring
Change Management
Business Continuity and Disaster Recovery Planning

Questions 36–40

36foundation · easy
How do administrative controls support risk reduction?
Select an answer first
37expert · hard
A global company must comply with the EU General Data Protection Regulation (GDPR) for its European customers. The company currently stores all customer data in a data center in the United States. A risk assessment shows that transferring personal data across borders may violate GDPR requirements. The company wants to continue serving European customers while ensuring compliance. Which approach best addresses the compliance risk?
Select an answer first
38foundation · easy
What is the main purpose of a security policy?
Select an answer first
39foundation · easy
Which type of security policy is specifically designed to govern how employees use the organization's internet and email resources?
Select an answer first
40foundation · easy
Why is testing a disaster recovery plan important?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Administrative Security Controls ECSS Practice Questions (Page 8)

Questions 36–40

How do administrative controls support risk reduction?

What is the main purpose of a security policy?

Which type of security policy is specifically designed to govern how employees use the organization's internet and email resources?

Why is testing a disaster recovery plan important?

Keep studying — Network Defense Fundamentals and Controls