Managing System Security GSLC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is an example of a regulatory requirement that may impact system security practices?

   • AThe NIST Cybersecurity Framework
   • BThe ITIL framework
   • CThe General Data Protection Regulation (GDPR)
   • DThe ISO 27001 standard
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which factor should be considered when prioritizing which vulnerabilities to remediate first?

   • AThe order in which the vulnerabilities were discovered
   • BThe cost of the patch compared to the cost of the asset
   • CThe severity of the vulnerability and the criticality of the affected asset
   • DThe number of vulnerabilities reported by the scanner
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security manager is responsible for ensuring that a new software development project complies with the organization's security policies. The project will use a third-party cloud service for data storage. The manager must ensure that the cloud service provider's security controls are adequate. Which of the following is the most appropriate action?

   • ARequire the cloud service provider to sign a contract that includes a clause stating they are responsible for all security.
   • BRely on the cloud service provider's marketing materials that claim high security standards.
   • CAsk the development team to test the cloud service provider's security by attempting to hack into it.
   • DReview the cloud service provider's SOC 2 Type II report and include the provider in the organization's vendor risk management process.
   Reveal Solution Discussion Select an answer first
5. 9application · easy

   A security manager is developing an incident response plan for a potential malware outbreak. The plan must include steps to contain the infection, eradicate the malware, and recover affected systems. Which of the following sequences best represents the correct order of these steps?

   • AEradication, containment, recovery
   • BContainment, eradication, recovery
   • CRecovery, containment, eradication
   • DContainment, recovery, eradication
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security operations center (SOC) is overwhelmed with alerts from multiple monitoring tools. Many alerts are false positives, and the team is missing critical alerts. The SOC manager wants to improve the efficiency and effectiveness of monitoring. What is the most effective approach?

   • AIncrease the number of monitoring tools to capture more data.
   • BAssign more analysts to manually review all raw logs.
   • CImplement a SIEM solution to aggregate and correlate logs, and tune alert rules to reduce false positives.
   • DDisable all alerts except for critical severity to reduce noise.
   Reveal Solution Discussion Select an answer first