A company wants to outsource the operation of its security monitoring and alert analysis to a third party. Which service model is most appropriate?

Security Operations Center as a Service (SOC-as-a-Service)

Security Information and Event Management (SIEM) software

Identity and Access Management (IAM) service

An organization lacks the in-house staff to monitor security alerts 24/7. Which third-party service provides continuous monitoring and analysis of security events, often including incident response?

Managed Detection and Response (MDR)

A security team is deploying an intrusion detection system (IDS) on a high-traffic network segment. They want to minimize the impact on network performance and ensure that the IDS does not become a point of failure. How should they deploy the IDS?

Place the IDS inline between the router and the switch

Use the IDS as a proxy for all traffic

Deploy the IDS as a virtual appliance on the same server as the firewall

Connect the IDS to a network tap or SPAN port in passive mode

A company's security policy requires that only approved software can run on employee workstations. The IT team has a list of all approved applications. They want to enforce this policy while minimizing the administrative overhead of constantly updating a block list. Which approach should they choose?

Application blacklisting that blocks known malicious applications

Application whitelisting that allows only the approved applications to execute

Host-based firewall rules that block all inbound traffic to workstations

Anti-malware software with signature-based detection only

A security administrator needs to block malicious requests targeting a specific web application, such as SQL injection attempts in HTTP parameters. Which firewall type is most appropriate for this task?

Next-generation firewall (NGFW)

Certified Information Systems Security Professional

Domain 7Objective 7

7.7 - Operate and Maintain Detection and Preventative Measures CISSP Practice Questions (Page 3)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

13%of the exam

Questions 11–15

11foundation · easy
A company wants to outsource the operation of its security monitoring and alert analysis to a third party. Which service model is most appropriate?
Select an answer first
12foundation · easy
An organization lacks the in-house staff to monitor security alerts 24/7. Which third-party service provides continuous monitoring and analysis of security events, often including incident response?
Select an answer first
13application · medium
A security team is deploying an intrusion detection system (IDS) on a high-traffic network segment. They want to minimize the impact on network performance and ensure that the IDS does not become a point of failure. How should they deploy the IDS?
Select an answer first
14application · medium
A company's security policy requires that only approved software can run on employee workstations. The IT team has a list of all approved applications. They want to enforce this policy while minimizing the administrative overhead of constantly updating a block list. Which approach should they choose?
Select an answer first
15foundation · easy
A security administrator needs to block malicious requests targeting a specific web application, such as SQL injection attempts in HTTP parameters. Which firewall type is most appropriate for this task?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.