CCP Security Operations & Incident Response

Question 1

What is the primary goal of security operations?

Accepted Answer

To monitor and respond to cybersecurity threats

Answer

To develop new hardware.

Answer

To create backup emails.

Answer

To reset user passwords.

Question 2

What is an Incident Response Plan (IRP)?

Accepted Answer

A protocol for handling security breaches and recovery

Answer

A software installation manual.

Answer

A plan to create user accounts.

Answer

A firewall configuration guide.

Question 3

What is the first step in the incident response process?

Accepted Answer

Identification

Answer

Eradication

Answer

Containment

Answer

Recovery

Question 4

Why is logging important in security operations?

Accepted Answer

To record and analyze system and user activities

Answer

To fill up storage space.

Answer

To slow down the network.

Answer

To erase audit trails.

Question 5

What does containment involve during a cybersecurity incident?

Accepted Answer

Isolating the affected systems to prevent further damage

Answer

Ignoring the threat.

Answer

Shutting down the organization.

Answer

Updating software later.

Question 6

Which tool helps detect security threats in real time?

Accepted Answer

SIEM

Answer

ERP

Answer

CRM

Answer

CMS

Question 7

What is the purpose of a Security Operations Center (SOC)?

Accepted Answer

To centralize and manage security threat responses

Answer

To run marketing campaigns.

Answer

To manage HR tasks.

Answer

To process payroll.

Question 8

Why is post-incident analysis important?

Accepted Answer

To review actions taken and improve response plans

Answer

To punish team members.

Answer

To close the case and move on.

Answer

To discard evidence.

Question 9

What is the final step in the incident response process?

Accepted Answer

Recovery

Answer

Eradication

Answer

Identification

Answer

Containment