What is the primary role of a security procedure?

To recommend optional best practices

To set mandatory security requirements

To provide step-by-step instructions for implementing a policy

To define the overall security strategy

A company has a security policy that was approved three years ago. The regulatory environment has changed, and the policy no longer addresses current compliance requirements. What should the company do first in the policy lifecycle?

Immediately retire the policy and write a new one from scratch

Schedule a policy review to assess the need for updates

Ignore the policy until a security incident occurs

Disseminate the existing policy to all employees again

A company's security policy requires that all access requests be reviewed and approved before a user account is created. The IT helpdesk needs a consistent way to handle these requests. What should the helpdesk be given?

A system-specific policy that describes the access controls for each server

A security baseline that specifies the minimum password complexity for new accounts

A security procedure that lists the steps for submitting, approving, and creating access requests

A security guideline that recommends best practices for access management

A security baseline is best described as:

A minimum set of security configurations that must be implemented

A recommended but optional set of best practices

A high-level statement of management intent

A step-by-step procedure for installing software

EC-CouncilNetwork Defense Essentials

Domain 2Objective 2

Security Policies and Governance NDE Practice Questions (Page 9)

Part of the Administrative and Physical Security Controls domain, which makes up ~15% of our current practice bank.

49questions here

10free pages

6concepts

Questions 41–45

41foundation · easy
What is the primary role of a security procedure?
Select an answer first
42application · medium
A company has a security policy that was approved three years ago. The regulatory environment has changed, and the policy no longer addresses current compliance requirements. What should the company do first in the policy lifecycle?
Select an answer first
43application · medium
A company's security policy requires that all access requests be reviewed and approved before a user account is created. The IT helpdesk needs a consistent way to handle these requests. What should the helpdesk be given?
Select an answer first
44foundation · easy
In the security policy lifecycle, which stage typically follows the development and review of a policy?
Select an answer first
45foundation · easy
A security baseline is best described as:
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.