Which three core goals form the foundation of information security?

Prevention, detection, and response

Authentication, authorization, and accounting

Confidentiality, integrity, and availability

Privacy, compliance, and auditability

What is the relationship between a security policy and a security procedure?

A procedure is a high-level statement, while a policy provides specific steps

A policy is a high-level statement, while a procedure provides specific steps to implement the policy

A procedure is mandatory, while a policy is optional

A hospital's network has a firewall, antivirus, and a VPN. However, a recent attack used a zero-day exploit to bypass the firewall and antivirus, and the attacker accessed patient records. The hospital wants to improve its defense-in-depth strategy. Which additional control would be most effective in preventing a similar attack?

Implement strict egress filtering to block all outbound traffic except to approved IP addresses.

Increase the frequency of antivirus signature updates to daily.

Require all employees to use a password manager and enable MFA on all accounts.

Deploy an intrusion prevention system (IPS) that can detect and block zero-day exploits based on behavioral analysis.

EC-CouncilEthical Hacking Essentials

Domain 1Objective 1

Overview of Information Security and Defense Strategies EHE Practice Questions (Page 9)

Part of the Information Security and Ethical Hacking Foundations domain, which makes up ~16% of our current practice bank.

50questions here

10free pages

7concepts

Questions 41–45

41foundation · easy
Which of the following is a common type of threat to information assets?
Select an answer first
42foundation · easy
Which three core goals form the foundation of information security?
Select an answer first
43foundation · easy
What is the relationship between a security policy and a security procedure?
Select an answer first
44expert · medium
A hospital's network has a firewall, antivirus, and a VPN. However, a recent attack used a zero-day exploit to bypass the firewall and antivirus, and the attacker accessed patient records. The hospital wants to improve its defense-in-depth strategy. Which additional control would be most effective in preventing a similar attack?
Select an answer first
45application · medium
A hospital's electronic health record system is down due to a ransomware attack. Doctors cannot access patient histories, and surgeries are being postponed. Which information security goal is being most directly violated?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Overview of Information Security and Defense Strategies EHE Practice Questions (Page 9)

Questions 41–45

Which of the following is a common type of threat to information assets?

Which three core goals form the foundation of information security?

What is the relationship between a security policy and a security procedure?

A hospital's electronic health record system is down due to a ransomware attack. Doctors cannot access patient histories, and surgeries are being postponed. Which information security goal is being most directly violated?

Keep studying — Information Security and Ethical Hacking Foundations