Overview of Information Security and Defense Strategies EHE Practice Questions (Page 10)

Questions 46–50

1. 46expert · medium

   A company has a mature security program with preventive controls such as firewalls and endpoint protection. However, a recent audit found that the company has no formal incident response plan and no backup restoration testing. The audit recommends adding detective and corrective controls. Which control should be implemented first to improve the company's security posture?

   • AA backup solution with automated daily backups and quarterly restoration tests.
   • BAn incident response plan that defines roles, procedures, and communication channels.
   • CA vulnerability management program that scans and patches systems weekly.
   • DA SIEM to collect and correlate logs for early detection of security incidents.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which of the following is an example of implementing defense in depth?

   • AUsing a firewall, intrusion detection system, and regular security awareness training
   • BInstalling antivirus software on all endpoints
   • CEncrypting data at rest and in transit
   • DUsing a firewall as the sole security measure
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   After a data breach, the security team restores the affected systems from backups and applies patches to close the vulnerability. Which type of security control is the team performing?

   • ADetective control
   • BDeterrent control
   • CPreventive control
   • DCorrective control
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   A security team is designing a defense-in-depth strategy for a new application. They have implemented a web application firewall (WAF), strong authentication, and encryption. Which additional control would best complete a layered defense by addressing the detection gap?

   • AA security policy requiring regular password changes.
   • BA backup and recovery plan.
   • CA second firewall to block more traffic.
   • DIntrusion detection system (IDS) to monitor and alert on suspicious activity.
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   Why are security policies important to an organization's defense strategy?

   • AThey replace the need for technical security controls
   • BThey are legally binding contracts with external parties
   • CThey provide a high-level direction and management commitment to security
   • DThey are detailed step-by-step instructions for performing tasks
   Reveal Solution Discussion Select an answer first