4.02 Determine the Appropriate Proactive Security Response Plan 401 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is an example of a proactive monitoring mechanism?

   • ADeploying a SIEM system that continuously collects and analyzes security logs
   • BConducting a forensic investigation of a compromised server
   • CPerforming a post-incident review to identify lessons learned
   • DAnalyzing firewall logs after a breach has been reported
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An e-commerce company has a proactive security response plan in place. However, the plan has not been updated in two years, and the company has recently migrated to a cloud infrastructure. The security team wants to ensure the plan remains effective. What should they do first?

   • AImmediately implement new security controls for the cloud environment.
   • BConduct a review of the existing plan and update it to reflect the new cloud environment and associated threats.
   • CDisable all cloud services until the plan is updated.
   • DSchedule a tabletop exercise to test the current plan.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the purpose of conducting a tabletop exercise for the incident response team?

   • ATo test the team's ability to respond to a simulated incident scenario
   • BTo identify the root cause of a past security incident
   • CTo implement new security controls
   • DTo replace the need for automated security tools
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which type of security control is designed to stop a security incident from occurring?

   • ADetective control
   • BCorrective control
   • CCompensating control
   • DPreventive control
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A hospital is planning to implement a new patient portal that will allow patients to access their medical records online. The security team wants to identify potential threats and select controls to protect patient data. Which approach should they take?

   • AWait for a security incident to occur and then respond.
   • BImplement a firewall and antivirus software on all servers.
   • CPerform a risk assessment to identify threats such as unauthorized access and data breaches, then implement appropriate controls like encryption and access controls.
   • DRely on the cloud provider's security measures without additional controls.
   Reveal Solution Discussion Select an answer first