Security Operations Flashcards
6 cards from real ISC2 CC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Security Operations flashcards as text
What is the purpose of a security audit?
Answer: To evaluate the effectiveness of security controls and compliance
A security audit systematically evaluates security controls, policies, and procedures to determine their effectiveness and compliance.
What is data classification?
Answer: Categorizing data based on its sensitivity and required protection level
Data classification categorizes data according to its sensitivity and required level of protection, helping organizations apply appropriate controls.
What is the purpose of a patch management program?
Answer: To keep systems up to date with security and software fixes
Patch management ensures that systems are regularly updated with security patches to fix known vulnerabilities before they can be exploited.
Which of the following is an example of a technical security control?
Answer: Encryption of sensitive data
Encryption is a technical security control implemented through technology to protect data from unauthorized access.
What does configuration management in security help prevent?
Answer: Unauthorized or unplanned changes that could introduce vulnerabilities
Configuration management tracks and controls changes to system configurations, preventing unauthorized or unplanned changes that could introduce security weaknesses.
What type of security control is a security guard?
Answer: Physical control
A security guard is a physical control that protects against unauthorized physical access to facilities or resources.