An organization's SIEM generates a high volume of alerts for a known vulnerability scan that occurs every night. The security team wants to reduce false positives without missing real attacks. Which approach is most effective?

Increase the severity of all alerts to ensure they are reviewed

Disable the vulnerability scanner to eliminate the alerts

Create a suppression rule that filters out events from the scanner's IP address

Ignore all alerts from the scanner's IP address without logging

What is a common benefit of integrating threat intelligence feeds into a SIEM?

Reducing the need for log aggregation

Eliminating false positives entirely

Enhancing the SIEM's correlation rules with known indicators of compromise

Enabling the SIEM to automatically patch vulnerabilities

What is the primary purpose of log aggregation in a SIEM?

To analyze logs for suspicious patterns

To store logs for a legally mandated period

To collect logs from multiple sources into a central location

To generate alerts based on predefined rules

Which of the following is a direct way to integrate threat intelligence into a continuous monitoring system?

Training users on phishing awareness

Feeding indicators of compromise (IOCs) into detection rules

Increasing the frequency of vulnerability scans

Certified Secure Software Lifecycle Professional

Domain 7Objective 7

Perform Information Security Continuous Monitoring CSSLP Practice Questions (Page 7)

Part of the Secure Software Deployment, Operations, Maintenance domain, which accounts for 11% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 1–1 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

11%of the exam

Questions 31–35

31application · medium
An organization's SIEM generates a high volume of alerts for a known vulnerability scan that occurs every night. The security team wants to reduce false positives without missing real attacks. Which approach is most effective?
Select an answer first
32foundation · easy
What is a common benefit of integrating threat intelligence feeds into a SIEM?
Select an answer first
33foundation · easy
What is the primary purpose of log aggregation in a SIEM?
Select an answer first
34foundation · easy
Which of the following is a direct way to integrate threat intelligence into a continuous monitoring system?
Select an answer first
35foundation · easy
Which type of threat intelligence provides high-level information about the motivations and capabilities of threat actors, often used by executives for strategic planning?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.