Develop Secure Operations Plan ISSEP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   During secure operations, which role is primarily responsible for the day-to-day implementation and enforcement of the system's security policy, including managing user access and monitoring system activity?

   • AAuthorizing official (AO)
   • BChief information officer (CIO)
   • CSystem administrator
   • DInformation system security officer (ISSO)
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When a security event is detected, what is the typical requirement regarding the timeframe for reporting it to the appropriate authorities?

   • AReport within 30 days
   • BReport at the next quarterly review
   • CReport only after the investigation is complete
   • DReport as soon as possible, often within a specified number of hours
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   An organization's security event reporting policy requires that all security incidents be reported to the CISO within 4 hours. A security analyst discovers a potential data breach that may have occurred over the weekend. The analyst is unsure if the data was actually exfiltrated. What should the analyst do?

   • AReport the potential breach to the CISO immediately, even without confirmation
   • BIgnore the incident because it may not be a breach
   • CReport the incident to law enforcement instead of the CISO
   • DWait until the investigation confirms the breach before reporting
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A secure operations plan for a hospital must ensure that personnel who manage the electronic health record (EHR) system have the appropriate training and access. Which role should be responsible for granting and revoking access to the EHR system?

   • ANetwork administrator
   • BAccess administrator
   • CChief medical officer
   • DHuman resources manager
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization is updating its secure operations plan and needs to specify the qualifications for personnel who will have privileged access to the production environment. The plan must ensure that these individuals have the necessary skills and trustworthiness. Which combination of requirements should the plan include?

   • ARelevant technical certifications and a background check
   • BAt least five years of experience in any IT role
   • CA college degree in any field and a security clearance
   • DA recommendation from a supervisor and a valid driver's license
   Reveal Solution Discussion Select an answer first