Information Security Fundamentals ECSS Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A government contractor stores documents classified as 'secret' and 'public' on the same file server. The contractor is required to protect secret documents from unauthorized disclosure while keeping public documents readily accessible. Which data handling approach best meets both requirements?

   • AApply strict access controls and encryption to secret documents, while leaving public documents accessible to all users
   • BApply the same access controls to both secret and public documents
   • CEncrypt both secret and public documents with the same key
   • DStore public documents on the same server without any access controls
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Why is security awareness training important for reducing human-related security risks?

   • AIt eliminates all security threats
   • BIt is only required for new employees
   • CIt replaces the need for technical security controls
   • DIt helps employees recognize and avoid common threats like phishing
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which phase of the incident response process involves limiting the scope and impact of a security incident?

   • AContainment
   • BRecovery
   • CEradication
   • DDetection
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company has experienced several phishing incidents where employees clicked on malicious links in emails. The security team wants to reduce the likelihood of these incidents recurring. Which approach is most directly aimed at addressing the human factor?

   • ADisabling all email links
   • BImplementing an email spam filter
   • CDeploying endpoint antivirus software
   • DConducting regular security awareness training and simulated phishing exercises
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company's intrusion detection system (IDS) alerts on suspicious outbound traffic from a workstation. The security analyst investigates and confirms that the workstation is infected with malware that is exfiltrating data. The analyst isolates the workstation from the network and then runs an antivirus scan to remove the malware. Which two types of security controls did the analyst apply, in order?

   • ACorrective (IDS alert) and preventive (isolation)
   • BDetective (antivirus scan) and preventive (isolation)
   • CDetective (IDS alert) and corrective (isolation and antivirus removal)
   • DPreventive (IDS alert) and detective (antivirus scan)
   Reveal Solution Discussion Select an answer first