1.3 Describe Security Terms 200-201 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the main benefit of run book automation (RBA) in incident response?

   • AIt guarantees that all incidents are resolved without errors
   • BIt standardizes and speeds up response procedures
   • CIt replaces the need for security monitoring tools
   • DIt eliminates the need for human incident responders
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which practice is an example of DevSecOps in action?

   • ARestricting security knowledge to a few specialists
   • BRunning automated security scans as part of the CI/CD pipeline
   • CPerforming a security audit once a year
   • DHiring a penetration testing firm after deployment
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the core philosophy of DevSecOps?

   • ASecurity is integrated into every stage of the DevOps pipeline
   • BSecurity is a separate phase that occurs after development and operations
   • CSecurity is the sole responsibility of a dedicated security team
   • DSecurity is only applied to production environments
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A SOC uses run book automation for incident response. The run book for malware infections includes steps to isolate the host, collect forensic images, and block C2 domains. However, the automation sometimes fails because the host is already isolated by a previous alert, and the C2 domain block is already in place. Which improvement to the run book would best address this issue?

   • AIncrease the timeout for the automation to allow more time for the steps to complete.
   • BRemove the isolation and C2 blocking steps from the run book to avoid failures.
   • CAdd a pre-check step in the run book to verify if the host is already isolated and if the C2 block exists, skipping those steps if already done.
   • DAssign a human analyst to manually perform the isolation and C2 blocking steps.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A software development team is designing a new customer-facing web application that will handle payment card data. The team wants to identify potential threats early in the design phase and prioritize security controls. Which activity best supports this goal?

   • AHire a penetration testing firm to test the application after it is fully developed.
   • BWait until the application is deployed and then run a vulnerability scanner to find weaknesses.
   • CConduct a threat modeling session using a structured methodology like STRIDE to identify and rank threats to the application.
   • DPurchase a web application firewall (WAF) and rely on it to protect against all threats.
   Reveal Solution Discussion Select an answer first