What is the primary purpose of data access controls?

To monitor network traffic for malicious activity

To ensure that only authorized users can access or modify data

To encrypt data when it is stored on disk

A hospital is required by law to keep patient medical records for at least 10 years. After that period, the records must be securely destroyed. Which disposal method is most appropriate for the electronic health records stored on a server?

Move the records to a recycle bin and empty it

Rename the files and leave them on the server

Securely delete the files and overwrite the storage space multiple times to prevent recovery

Compress the files and store them in an archive folder

A company has a document management system with different types of documents. Some documents are public, some are internal, and some are confidential. The company wants to ensure that only authorized employees can access confidential documents. What is the most effective access control approach?

Encrypt all documents and give the decryption key to all employees.

Use a naming convention to identify confidential documents and rely on employees to not open them.

Assign each document a classification label and configure access permissions based on that label.

Store all documents in one folder and set the folder to read-only for everyone.

A company has a shared network drive containing project files. Some files contain confidential client information and should only be accessible to the project team. Other files are general announcements for all employees. What is the most effective way to control access?

Encrypt the confidential files and share the decryption key with all employees.

Create separate folders for confidential and general files, and assign permissions to each folder based on the data classification.

Use a naming convention to mark confidential files and rely on employees to follow the rules.

Place all files in one folder and set the folder to read-only for everyone.

EC-CouncilCertified Security Specialist

Domain 1Objective 7

Data Security ECSS Practice Questions (Page 9)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

53questions here

11free pages

10concepts

Questions 41–45

41foundation · easy
What is the primary purpose of data access controls?
Select an answer first
42application · medium
A hospital is required by law to keep patient medical records for at least 10 years. After that period, the records must be securely destroyed. Which disposal method is most appropriate for the electronic health records stored on a server?
Select an answer first
43application · medium
A company has a document management system with different types of documents. Some documents are public, some are internal, and some are confidential. The company wants to ensure that only authorized employees can access confidential documents. What is the most effective access control approach?
Select an answer first
44foundation · easy
Which backup strategy involves copying only the data that has changed since the last full backup?
Select an answer first
45application · medium
A company has a shared network drive containing project files. Some files contain confidential client information and should only be accessible to the project team. Other files are general announcements for all employees. What is the most effective way to control access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.