CISSP Security Operations 4

Question 1

What is the PRIMARY objective of conducting a lessons-learned review after an incident has been resolved?

Accepted Answer

Improving processes and controls to prevent recurrence

Answer

Lessons-learned reviews identify gaps in detection, response, and prevention so that controls and procedures can be improved before the next incident.

Question 2

An administrator sets an account lockout policy that triggers after 5 failed login attempts within 10 minutes. Which attack does this PRIMARILY mitigate?

Accepted Answer

Online brute-force attack

Answer

Account lockout thresholds stop online brute-force attacks by locking the account after a defined number of consecutive failed attempts.

Question 3

Which data destruction method is MOST appropriate for ensuring that sensitive data on a solid-state drive (SSD) cannot be recovered?

Accepted Answer

Cryptographic erasure followed by physical destruction

Answer

SSDs use wear leveling that prevents reliable overwriting; cryptographic erasure destroys the encryption key, and physical destruction eliminates any remaining data.

Question 4

A SOC analyst observes repeated DNS queries from an internal host to randomly generated domain names at regular intervals. Which attack technique does this MOST likely indicate?

Accepted Answer

Domain generation algorithm (DGA) based C2 communication

Answer

Malware using a Domain Generation Algorithm (DGA) generates many pseudo-random domain names and queries them to locate an active command-and-control server.

Question 5

Which physical security control uses two interlocking doors where the first must close before the second opens, preventing tailgating?

Accepted Answer

Mantrap (airlock)

Answer

A mantrap is a small room with two controlled doors that requires authentication and ensures only one person enters at a time, preventing tailgating.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP Security Operations 4