CSC Report Writing & Documentation 4

Question 1

What is the purpose of a 'methodology' section in a security assessment report?

Accepted Answer

To explain the testing approach, frameworks, and tools used so findings can be reproduced and validated

Answer

The methodology section gives transparency into how the assessment was conducted, supporting repeatability and client confidence.

Question 2

In the context of security reporting, what does 'dwell time' refer to?

Accepted Answer

The length of time a threat actor remains undetected within a compromised environment

Answer

Dwell time measures how long an attacker has persistent access before detection, a key metric in incident reports.

Question 3

Which of the following is the BEST practice for version control of a security report during peer review?

Accepted Answer

Use versioned filenames (e.g., v0.1, v0.2, FINAL) and track changes using document revision history

Answer

Versioned filenames and revision histories prevent overwriting and ensure reviewers can track what changed between drafts.

Question 4

A security consultant's report includes an appendix with raw tool output. What is the PRIMARY function of this appendix?

Accepted Answer

To provide supporting technical evidence that validates findings without cluttering the main body

Answer

Appendices house detailed evidence that substantiates findings while keeping the main report readable.

Question 5

When documenting a social engineering assessment in a report, what information must be handled with particular sensitivity?

Accepted Answer

The identities of employees who failed simulated phishing tests

Answer

Individual employee names tied to failure results can create HR and legal complications and should be anonymized or handled carefully.

(CSC) Certified Security Consultant Practice Test