Controls and Techniques CCOA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A hospital's IT team is designing security for its patient records system. They have already deployed a firewall at the network perimeter and installed antivirus on all workstations. To strengthen defense in depth, which additional control should they prioritize to protect against a workstation being compromised and used to access the records server?

   • AImplement network segmentation between the workstation and records server subnets
   • BDeploy a second firewall between the workstations and the internet
   • CIncrease the frequency of antivirus signature updates on all workstations
   • DRequire users to change their passwords every 30 days
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is an example of a technical security control?

   • AAn intrusion detection system (IDS) monitoring network traffic
   • BA company policy requiring strong passwords
   • CA locked server room door
   • DA security guard checking badges at the entrance
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A security analyst is reviewing controls implemented by an organization. Which control type is correctly matched with its category?

   • AA firewall rule is a physical control because it is enforced by network hardware.
   • BA biometric door lock is an administrative control because it enforces an access policy.
   • CA data encryption policy is a technical control because it specifies how data must be protected.
   • DA security awareness training program is an administrative control because it addresses human behavior through policy and education.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is an example of a physical security control?

   • AA firewall
   • BA security policy
   • CA biometric door lock
   • DAn intrusion detection system
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   The principle of least privilege states that users should be granted:

   • AAll permissions available to ensure they can handle any task
   • BPermissions based on their seniority in the organization
   • COnly the permissions necessary to perform their job functions
   • DPermissions that are the same as their manager's
   Reveal Solution Discussion Select an answer first