Report Writing & Documentation Flashcards
7 cards from real CSC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Report Writing & Documentation flashcards as text
Which of the following BEST describes the 'remediation' section of a security vulnerability finding?
Answer: Actionable steps the client can take to fix or mitigate the identified weakness
The remediation section provides practical guidance so the client can resolve the identified issue.
When classifying information sensitivity in security documentation, which classification level typically requires the MOST restrictive handling controls?
Answer: Top Secret / Restricted
Top Secret or Restricted classification demands the strictest access controls, encryption, and handling procedures.
A penetration test report lists a finding with 'High' likelihood but 'Low' impact. How should this finding be prioritized relative to one with 'Low' likelihood but 'Critical' impact?
Answer: Priority depends on the risk matrix; Critical impact may outweigh High likelihood
Risk ratings are derived from both likelihood and impact; a critical impact finding may rank higher despite lower likelihood.
What is the MAIN reason security consultants use standardized templates for report writing?
Answer: To ensure consistency, completeness, and professional quality across all deliverables
Standardized templates enforce consistent structure and reduce the risk of omitting critical sections.
Which element should a security consultant include when documenting proof-of-concept (PoC) exploit evidence in a report?
Answer: Redacted or sanitized evidence sufficient to validate the finding without enabling weaponization
PoC evidence should validate the finding's existence without providing a ready-to-use attack tool.
When a security report must be transmitted electronically to a client, which control is MOST important to apply to the document?
Answer: Encrypting the document and using a secure transmission channel
Sensitive assessment reports must be encrypted at rest and in transit to prevent unauthorized disclosure.
A client asks a security consultant to remove a critical finding from the final report before it is shared with the board. What is the APPROPRIATE response?
Answer: Explain that omitting validated findings undermines the report's integrity and the client's security posture
Omitting confirmed findings violates professional ethics and may expose both the consultant and client to greater risk.