Information Security Fundamentals ECSS Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A system administrator is configuring access to a sensitive file share. The company requires that users prove their identity with a password and a one-time code from a mobile app, and that each user's file access be logged. The administrator also needs to ensure that users cannot deny having accessed a file. Which set of controls fulfills all requirements?

   • ARole-based access control, antivirus, and firewall rules
   • BSingle sign-on, file encryption, and backup procedures
   • CMulti-factor authentication, audit logging, and digital signatures on file access
   • DStrong password policy, file permissions, and data classification labels
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which data classification level is typically intended for information that, if disclosed, could cause serious damage to an organization and requires the highest level of protection?

   • ASecret
   • BConfidential
   • CInternal
   • DPublic
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company deploys an intrusion detection system (IDS) that monitors network traffic and alerts administrators when suspicious activity is detected. The IDS does not block the traffic. Which category of security control does the IDS represent?

   • ADeterrent control
   • BCorrective control
   • CPreventive control
   • DDetective control
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company is evaluating the risk of a legacy system that stores customer data. The system has a known vulnerability that could lead to a data breach. The cost to patch the system is $50,000, but patching will require a 24-hour downtime that could cost $100,000 in lost revenue. The expected loss from a breach is $200,000 with a 20% probability. What is the most cost-effective risk management decision?

   • AAvoid the risk by decommissioning the legacy system
   • BAccept the risk because the cost of mitigation exceeds the expected loss
   • CTransfer the risk by purchasing cyber insurance
   • DMitigate the risk by patching the system
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A hospital's patient portal stores medical records and allows patients to view their own lab results. The security team is concerned about an attacker intercepting the data while it is transmitted over the internet. Which security goal is directly threatened by this interception, and which control would best protect it?

   • AAvailability; deploy a web application firewall
   • BConfidentiality; enforce TLS encryption for all portal traffic
   • CNon-repudiation; enable audit logging on the portal
   • DIntegrity; implement file hashing on the server
   Reveal Solution Discussion Select an answer first