A multinational company's continuous monitoring program collects user activity logs from systems in multiple countries. A new data protection regulation in one country requires that personal data be processed only within that country's borders. What is the most appropriate action for the company to take?

Anonymize the logs and store them in a central SIEM

Encrypt the logs and store them in any country

Route all logs from that country to a SIEM located within the same country

Stop collecting logs from that country to avoid the regulation

A security team receives a commercial threat intelligence feed that includes indicators of compromise for a new ransomware campaign. The team wants to prioritize alerts in their SIEM. Which approach would best use this intelligence to improve detection prioritization?

Share the feed with all employees for manual review

Store the feed in a spreadsheet for future reference

Disable all existing detection rules to reduce noise

Import the IOCs into the SIEM and create rules that assign higher severity to matching events

How can threat intelligence be used to improve the prioritization of security alerts in continuous monitoring?

By increasing the volume of logs collected

By correlating alerts with known indicators of compromise (IOCs)

By automatically patching all vulnerabilities

By replacing the need for human analysis

Certified Secure Software Lifecycle Professional

Domain 7Objective 7

Perform Information Security Continuous Monitoring CSSLP Practice Questions (Page 1)

Part of the Secure Software Deployment, Operations, Maintenance domain, which accounts for 11% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 1–1 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

11%of the exam

Questions 1–5

1application · medium
A multinational company's continuous monitoring program collects user activity logs from systems in multiple countries. A new data protection regulation in one country requires that personal data be processed only within that country's borders. What is the most appropriate action for the company to take?
Select an answer first
2foundation · easy
Which intrusion detection method relies on a database of known attack patterns to identify malicious activity?
Select an answer first
3application · medium
A security team receives a commercial threat intelligence feed that includes indicators of compromise for a new ransomware campaign. The team wants to prioritize alerts in their SIEM. Which approach would best use this intelligence to improve detection prioritization?
Select an answer first
4foundation · easy
How can threat intelligence be used to improve the prioritization of security alerts in continuous monitoring?
Select an answer first
5foundation · easy
Which type of observable data is most useful for measuring the overall health and performance of a system over time, such as the number of requests per second?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.

Perform Information Security Continuous Monitoring CSSLP Practice Questions (Page 1)

Questions 1–5

Which intrusion detection method relies on a database of known attack patterns to identify malicious activity?

A security team receives a commercial threat intelligence feed that includes indicators of compromise for a new ransomware campaign. The team wants to prioritize alerts in their SIEM. Which approach would best use this intelligence to improve detection prioritization?

How can threat intelligence be used to improve the prioritization of security alerts in continuous monitoring?

Which type of observable data is most useful for measuring the overall health and performance of a system over time, such as the number of requests per second?

Keep studying — Secure Software Deployment, Operations, Maintenance