ISC2 CC Security Operations

Question 1

What is the purpose of a security audit?

Accepted Answer

To evaluate the effectiveness of security controls and compliance

Answer

To train employees on security policies

Answer

To implement new security technologies

Answer

To respond to active security incidents

Question 2

What is data classification?

Accepted Answer

Categorizing data based on its sensitivity and required protection level

Answer

Organizing data by file size for storage optimization

Answer

Encrypting data based on its file type

Answer

Backing up data organized by creation date

Question 3

What is the purpose of a patch management program?

Accepted Answer

To keep systems up to date with security and software fixes

Answer

To monitor network traffic for security threats

Answer

To manage user access permissions across systems

Answer

To back up all system configurations regularly

Question 4

Which of the following is an example of a technical security control?

Accepted Answer

Encryption of sensitive data

Answer

Security policy document

Answer

Employee security awareness training

Answer

Employee background checks

Question 5

What does configuration management in security help prevent?

Accepted Answer

Unauthorized or unplanned changes that could introduce vulnerabilities

Answer

Network outages caused by unexpected traffic spikes

Answer

User errors in data entry and processing

Answer

Application performance degradation over time

Question 6

What type of security control is a security guard?

Accepted Answer

Physical control

Answer

Technical control

Answer

Administrative control

Answer

Corrective control