Implement and Integrate Security Solutions ISSEP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security operations team is setting up monitoring for a new cloud-based application. The team wants to detect anomalies in user behavior, such as unusual login times or access from new locations. Which of the following is the most effective approach?

   • AConfigure the application to block any login from a new location automatically.
   • BImplement a user and entity behavior analytics (UEBA) tool that establishes a baseline and alerts on deviations.
   • CReview the application logs manually on a weekly basis.
   • DSet up alerts for any login attempt that occurs outside of business hours.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of security testing and validation?

   • ATo replace the need for ongoing security monitoring
   • BTo identify all potential vulnerabilities in the system
   • CTo verify that implemented security controls function correctly and meet requirements
   • DTo document the system's architecture for auditors
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A development team is adopting DevSecOps and wants to ensure that security is considered throughout the software development lifecycle. Which of the following practices best exemplifies the DevSecOps principle of 'shifting left'?

   • APerforming a penetration test on the final build before release.
   • BSetting up a security operations center to monitor the application after deployment.
   • CConducting a security review of the architecture before any code is written.
   • DCreating a security incident response plan for the application.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When integrating a new security component into an existing system, what is the MOST important consideration to avoid disrupting functionality?

   • AInstalling the component directly into production to save time
   • BDisabling all existing security controls temporarily
   • CPerforming a thorough impact analysis and testing the integration in a staging environment
   • DEnsuring the component is from the same vendor as the existing system
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which practice is essential for managing configuration changes to maintain system security?

   • AAllowing each administrator to make changes independently
   • BApplying changes directly to production systems without review
   • CDeleting configuration backups after each change
   • DDocumenting and approving changes through a formal change management process
   Reveal Solution Discussion Select an answer first