CSC Audit, Monitoring & Incident Response 3

Question 1

Under HIPAA, what is the maximum penalty tier for willful neglect of security requirements that is not corrected?

Accepted Answer

$1.9 million per violation category per year

Answer

HIPAA's highest penalty tier for uncorrected willful neglect is $50,000 per violation with an annual cap of $1.9 million per violation category.

Question 2

A security team wants to detect lateral movement within the network. Which monitoring strategy is MOST effective?

Accepted Answer

Analyzing east-west traffic and internal authentication logs

Answer

Lateral movement occurs inside the network, making east-west traffic analysis and internal authentication logs the most relevant detection sources.

Question 3

Which document formally authorizes an IR team to take containment actions during a security incident?

Accepted Answer

Incident Response Policy

Answer

The Incident Response Policy defines authority, roles, and approved actions, providing formal authorization for the IR team to act during incidents.

Question 4

A compliance audit finds that security logs are not being reviewed daily as required by policy. This is BEST described as:

Accepted Answer

A control deficiency

Answer

A control deficiency exists when an implemented control fails to operate as intended, such as logs existing but not being reviewed as required.

Question 5

Which approach allows an organization to test its incident response plan without disrupting production systems?

Accepted Answer

Tabletop exercise with key stakeholders

Answer

Tabletop exercises allow teams to walk through incident scenarios in a discussion-based format, testing the plan without operational risk.

(CSC) Cybersecurity Compliance Certification Practice Test