CISSP Security Operations 2

Question 1

Which type of fire suppression system discharges agent only in the zone where heat is detected, minimizing damage to surrounding equipment?

Accepted Answer

Pre-action sprinkler

Answer

A pre-action system requires two triggers (heat detector AND sprinkler head activation) before water is released, limiting discharge to the affected zone.

Question 2

An analyst notices that a privileged account logged in at 2 AM and exported 10,000 records from a customer database. Which response action should be taken FIRST?

Accepted Answer

Immediately disable the account and preserve logs

Answer

Disabling the account stops ongoing harm while preserving log evidence is essential for forensic investigation.

Question 3

What is the PRIMARY purpose of a Configuration Management Database (CMDB) in security operations?

Accepted Answer

Maintaining authoritative records of IT assets and their relationships

Answer

A CMDB provides a centralized, authoritative inventory of configuration items (CIs) and their interdependencies to support change and incident management.

Question 4

During a forensic investigation, an examiner creates a bit-for-bit copy of a hard drive. Which tool output is used to verify the copy's integrity?

Accepted Answer

Cryptographic hash value

Answer

Comparing hash values (e.g., MD5 or SHA-256) of the original and the copy confirms that no data was altered during the imaging process.

Question 5

Which patch management concept describes the maximum acceptable time between vulnerability disclosure and patch deployment?

Accepted Answer

Remediation SLA

Answer

A remediation SLA defines the contractually or policy-mandated deadline for applying patches based on vulnerability severity.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP Security Operations 2