4.02 Determine the Appropriate Proactive Security Response Plan 401 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an example of a detective security control?

   • AAn intrusion detection system (IDS) that alerts on suspicious network activity
   • BA firewall rule that blocks unauthorized inbound traffic
   • CA security policy that requires strong passwords
   • DA backup system that restores data after a ransomware attack
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A software development company is building a new mobile application that will process payment transactions. The security team wants to identify potential threats and select appropriate controls during the design phase. Which activity should they perform?

   • AHire an external security firm to audit the application after release.
   • BWait until the application is in production and then perform a penetration test.
   • CConduct a threat modeling session to identify potential attack vectors and prioritize risks.
   • DImplement a web application firewall (WAF) as the primary security control.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A logistics company wants to improve its security monitoring to detect anomalies in network traffic that may indicate a breach. They have a limited budget and need to prioritize their investments. Which approach would be most effective?

   • AIncrease the frequency of vulnerability scans.
   • BHire more security analysts to manually review logs.
   • CPurchase additional firewalls for each network segment.
   • DImplement a Security Information and Event Management (SIEM) system and establish a baseline of normal network behavior.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A financial services company is deploying a new customer-facing web application that will handle sensitive personal data. The security team is in the planning phase and wants to identify potential threats and select appropriate controls before the application goes live. Which approach best aligns with proactive security response planning?

   • APurchase a comprehensive security suite and install it on all servers without prior analysis.
   • BConduct a threat model and risk assessment, then implement preventive and detective controls based on the findings.
   • CDeploy the application quickly and rely on the incident response team to handle any issues that arise after launch.
   • DImplement a strict password policy and require two-factor authentication for all users.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A retail company has experienced several data breaches in the past year. The security team wants to implement proactive monitoring to detect similar attacks early. They have identified that most attacks originated from phishing emails and exploited unpatched vulnerabilities. Which monitoring strategy would be most effective?

   • AConduct annual security awareness training for all employees.
   • BImplement a strict access control policy with least privilege.
   • CIncrease the frequency of full system backups.
   • DDeploy email filtering and intrusion detection systems, and implement a vulnerability management program.
   Reveal Solution Discussion Select an answer first