Information Security Fundamentals ECSS Practice Questions (Page 9)

Part of the Ethical Hacking Fundamentals and Core Attacks domain, which makes up ~17% of our current practice bank.

50questions here

10free pages

10concepts

10 Concepts in This Objective

Confidentiality, Integrity, and Availability (CIA) Triad
Authentication, Authorization, and Accounting (AAA)
Non-repudiation
Information Security Threats and Vulnerabilities
Risk Management Fundamentals
Security Controls (Preventive, Detective, Corrective)
Security Policies, Standards, and Procedures
Data Classification and Handling
Security Awareness and Training
Incident Response Fundamentals

Questions 41–45

41foundation · easy
A hospital's electronic health record system must ensure that patient data is only viewable by authorized medical staff. Which CIA pillar is the primary focus of this requirement?
Select an answer first
42application · medium
A company is developing an incident response plan. The plan includes steps to identify the scope of an incident, contain the incident, and restore systems to normal operation. Which phase of the incident response process is missing from this plan?
Select an answer first
43application · medium
A company is creating a document that specifies the mandatory steps an employee must follow when handling customer credit card data, such as encrypting the data before storing it and shredding printed copies. Which type of security document is this?
Select an answer first
44application · medium
A small business runs its website on a single server. An unpatched vulnerability in the web server software allows an attacker to deface the homepage. Which term best describes the unpatched vulnerability, and which CIA pillar is most directly affected by the defacement?
Select an answer first
45application · medium
An organization's security team is writing a document that specifies the mandatory requirement that all employees must use multi-factor authentication (MFA) when accessing the corporate VPN. This document is high-level and does not include technical details. Which type of document is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Information Security Fundamentals ECSS Practice Questions (Page 9)

Questions 41–45

A hospital's electronic health record system must ensure that patient data is only viewable by authorized medical staff. Which CIA pillar is the primary focus of this requirement?

A company is developing an incident response plan. The plan includes steps to identify the scope of an incident, contain the incident, and restore systems to normal operation. Which phase of the incident response process is missing from this plan?

A company is creating a document that specifies the mandatory steps an employee must follow when handling customer credit card data, such as encrypting the data before storing it and shredding printed copies. Which type of security document is this?

A small business runs its website on a single server. An unpatched vulnerability in the web server software allows an attacker to deface the homepage. Which term best describes the unpatched vulnerability, and which CIA pillar is most directly affected by the defacement?

An organization's security team is writing a document that specifies the mandatory requirement that all employees must use multi-factor authentication (MFA) when accessing the corporate VPN. This document is high-level and does not include technical details. Which type of document is this?

Keep studying — Ethical Hacking Fundamentals and Core Attacks