Security Operations Flashcards
6 cards from real ISC2 CC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Security Operations flashcards as text
What is the purpose of logging and monitoring in security operations?
Answer: To create audit trails that enable detection and investigation of security events
Logging and monitoring create audit trails of system and user activity, enabling detection and investigation of security incidents.
What is a Security Information and Event Management (SIEM) system?
Answer: A tool that aggregates and correlates security logs from multiple sources for threat detection
A SIEM aggregates log data from multiple sources, correlates events, and provides real-time analysis to detect security threats.
What is social engineering?
Answer: Manipulating people through psychological tactics to reveal information or perform actions
Social engineering manipulates people through psychological tactics rather than technical means to gain unauthorized access or sensitive information.
What is the purpose of system hardening?
Answer: Reducing the attack surface by removing unnecessary services and applying secure configurations
System hardening reduces the attack surface by removing unnecessary software, closing unused ports, and applying secure configurations to minimize vulnerabilities.
What is the purpose of an incident response plan?
Answer: To provide a structured approach for detecting, containing, and recovering from security incidents
An incident response plan provides a predefined, structured approach for identifying, containing, eradicating, and recovering from security incidents.
What does data sanitization ensure before disposing of storage media?
Answer: That all data is permanently removed and cannot be recovered from the media
Data sanitization ensures that all data on storage media is permanently destroyed or unrecoverable before the media is disposed of or reused.