CSC Report Writing & Documentation 2

Question 1

When documenting a chain of custody for digital evidence in a security incident report, what information is MOST critical to record at each transfer?

Accepted Answer

The identity of each person who handled the evidence and the date/time of transfer

Answer

Chain of custody documentation must record who handled the evidence and when, ensuring its legal admissibility and integrity.

Question 2

A security consultant is writing an executive summary of a penetration test. Which of the following should be EXCLUDED from this section?

Accepted Answer

Detailed packet captures and hex dumps of exploits

Answer

Executive summaries target non-technical leadership and should omit granular technical artifacts like packet captures.

Question 3

Which report structure is MOST appropriate when a consultant must deliver findings incrementally throughout a long-term engagement?

Accepted Answer

Periodic interim reports supplemented by a final summary report

Answer

Interim reports allow clients to act on findings in real time, reducing risk before the engagement concludes.

Question 4

What is the PRIMARY purpose of including a 'scope' section in a security assessment report?

Accepted Answer

To define the boundaries of the assessment so findings can be properly contextualized

Answer

The scope section establishes what was and was not tested, preventing misinterpretation of findings.

Question 5

When assigning a CVSS score in a vulnerability report, which metric group assesses the exploitability of the vulnerability independently of any specific environment?

Accepted Answer

Base metrics

Answer

CVSS base metrics measure the intrinsic characteristics of a vulnerability that are constant regardless of environment or time.

(CSC) Certified Security Consultant Practice Test

(CSC) Certified Security Consultant Practice Test

CSC Report Writing & Documentation 2