CERA - Certified Elections Registration Administrator Election Security and Planning Questions and Answers — Questions and Answers
Question 1: An election administrator is developing a Continuity of Operations Plan (COOP) for a primary election. A severe thunderstorm is forecast for Election Day, which could lead to power outages at multiple polling locations. Which of the following is the MOST critical component to include in the COOP for this specific threat?
- A list of news media contacts for public announcements.
- Procedures for securing and transporting voting equipment and ballots to an alternate location.
- A roster of on-call IT staff to troubleshoot electronic poll book failures.
- A plan for deploying emergency paper ballots and establishing secure manual voting procedures. (Correct answer)
Correct answer: A plan for deploying emergency paper ballots and establishing secure manual voting procedures.
While all options are valuable components of a comprehensive COOP, a power outage directly impacts the functionality of electronic voting machines and e-poll books. Having a clear plan for emergency paper ballots and secure manual procedures is the most critical and direct response to ensure voting can continue without interruption or disenfranchisement.
Question 2: Which of the following is a primary objective of implementing a strict chain of custody for all election materials?
- To expedite the post-election canvassing process.
- To provide a transparent and auditable trail that ensures materials have not been tampered with. (Correct answer)
- To reduce the number of staff required to handle ballots and equipment.
- To comply with federal media regulations regarding election night reporting.
Correct answer: To provide a transparent and auditable trail that ensures materials have not been tampered with.
The fundamental purpose of chain of custody is to document every person who handles election materials, from ballots to voting machines, creating a verifiable record. This ensures the integrity of the materials by demonstrating they have been secure and accounted for at every stage, which is crucial for transparency and post-election audits.
Question 3: When conducting a physical security assessment of a potential polling place, which factor is of highest importance?
- The availability of ample parking for voters and poll workers.
- The presence of an on-site cafeteria for election staff.
- The ability to secure voting equipment and ballots from unauthorized access. (Correct answer)
- The aesthetic appeal and comfort of the voting area.
Correct answer: The ability to secure voting equipment and ballots from unauthorized access.
The paramount concern in a physical security assessment is ensuring the integrity and security of the election process. This involves controlling access to sensitive materials like ballots and voting equipment to prevent tampering, theft, or any form of unauthorized interference. While other factors contribute to a well-run polling place, security is the top priority.
Question 4: A local election office discovers its voter registration database has been compromised by a ransomware attack two weeks before an election. According to cybersecurity best practices, what is the most critical immediate step in their incident response plan?
- Immediately pay the ransom to regain access to the data.
- Isolate the affected systems from the network and activate the backup and recovery plan. (Correct answer)
- Issue a press release detailing the full extent of the breach.
- Contact the federal government to request a postponement of the election.
Correct answer: Isolate the affected systems from the network and activate the backup and recovery plan.
The first priority in a cyber incident like a ransomware attack is to contain the threat by isolating affected systems to prevent further spread. The next step is to activate the recovery plan, which should include restoring data from secure, pre-existing backups. This approach avoids rewarding attackers and focuses on restoring operations securely and independently.
Question 5: Which of the following security measures is most effective for preventing unauthorized access to a centralized voter registration system by election staff?
- Requiring all staff to attend an annual cybersecurity training seminar.
- Installing firewall and antivirus software on all office computers.
- Implementing role-based access control with multi-factor authentication. (Correct answer)
- Conducting daily backups of the voter registration database to an off-site location.
Correct answer: Implementing role-based access control with multi-factor authentication.
While training, firewalls, and backups are all important security layers, role-based access control (RBAC) combined with multi-factor authentication (MFA) is the most direct and effective control. RBAC ensures users can only access the information and functions necessary for their specific jobs (the principle of least privilege), and MFA adds a critical layer of identity verification beyond just a password.
Question 6: During early voting, a water pipe bursts at an early voting center, causing significant flooding and making the location unusable. The contingency plan calls for relocating the center. What is the election administrator's most important immediate responsibility in this scenario?
- Contacting the jurisdiction's insurance provider to file a claim.
- Securing all ballots and voting equipment and executing the chain of custody protocol for relocation. (Correct answer)
- Issuing a public apology for the inconvenience to voters.
- Organizing a team to begin cleanup of the damaged facility.
Correct answer: Securing all ballots and voting equipment and executing the chain of custody protocol for relocation.
In an emergency requiring the relocation of a polling place, the election administrator's first and most critical responsibility is to maintain the integrity of the election. This means immediately securing all official ballots, voting systems, and other sensitive materials and ensuring a proper, documented chain of custody is followed as they are moved to the alternate site.
CERA - Certified Elections Registration Administrator Election Security and Planning Questions and Answers
An election administrator is developing a Continuity of Operations Plan (COOP) for a primary election.
A severe thunderstorm is forecast for Election Day, which could lead to power outages at multiple polling locations.
Which of the following is the MOST critical component to include in the COOP for this specific threat?