Continuous Improvement GSOM Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   What is the primary purpose of a feedback loop in security operations management?

   • ATo automate incident response actions
   • BTo replace the need for security metrics
   • CTo collect input from stakeholders and use it to drive iterative improvements
   • DTo ensure that all security policies are followed
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A SOC manager is investigating why the mean time to respond (MTTR) to critical incidents has increased by 40% over the past quarter. The team has not changed its staffing or tooling. A review of incident logs shows that many incidents are waiting for additional context from the threat intelligence team. The threat intelligence team reports that they are understaffed and often take hours to respond to requests. The SOC manager wants to reduce MTTR without adding staff. Which approach best addresses the root cause while balancing the constraints?

   • ARequire the threat intelligence team to respond to all requests within 30 minutes, regardless of their workload.
   • BCreate a new KPI for threat intelligence response time and report it to management, without changing the process.
   • CImplement a tiered escalation process where critical incidents automatically include available threat intelligence context, and only escalate to the threat intelligence team for truly novel indicators.
   • DIncrease the number of critical incident escalations to the threat intelligence team to ensure they have full context.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A security operations center (SOC) manager wants to improve the quality of incident reports by incorporating feedback from the incident response team and the business stakeholders who receive the reports. The manager wants to establish a structured process that ensures this feedback is regularly collected and acted upon. Which action best achieves this?

   • ACompare the current report format to industry best practices and adopt any differences.
   • BSend a one-time email to all report recipients asking for suggestions.
   • CCreate a monthly feedback survey for report recipients and review the results in a quarterly improvement meeting.
   • DAsk the incident response team to informally share their thoughts at the end of each shift.
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   Which technique is commonly used in root cause analysis to visually map out the potential causes of a problem?

   • APareto chart
   • BFlowchart
   • CFishbone (Ishikawa) diagram
   • DGantt chart
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   What is the primary focus of the Kaizen approach to continuous improvement?

   • AStatistical process control to reduce variation
   • BLarge-scale, radical process redesign
   • CAchieving ISO 27001 certification
   • DContinuous, incremental improvements involving all employees
   Reveal Solution Discussion Select an answer first