Implement and Integrate Security Solutions ISSEP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the first step in an incident response procedure?

   • AContainment
   • BDetection and analysis
   • CPreparation
   • DRecovery
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security architect is integrating a new web application firewall (WAF) into an existing e-commerce platform. The WAF must not block legitimate traffic, but it must block common web attacks. The architect has deployed the WAF in monitoring mode and is reviewing the logs. Which of the following is the most appropriate next step?

   • AEnable enforcement mode immediately to protect the platform from attacks.
   • BSet the WAF to block all traffic that matches any rule, regardless of false positives.
   • CDisable the WAF and rely on the existing security controls.
   • DAnalyze the monitoring logs to identify false positives and tune the WAF rules before enabling enforcement.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   An organization is undergoing a compliance audit and must provide evidence that its security controls are effective. The auditor has requested evidence of continuous monitoring. Which of the following is the most appropriate evidence to provide?

   • AA screenshot of the SIEM dashboard showing current alerts.
   • BA list of security tools that are licensed for monitoring.
   • CA copy of the security policy that mandates continuous monitoring.
   • DA report from the SIEM showing alerts generated over the past month.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary benefit of integrating security checks into a CI/CD pipeline?

   • AIt allows security issues to be detected early and automatically in the development process
   • BIt replaces the need for security testing in production
   • CIt eliminates the need for manual code reviews
   • DIt guarantees that no vulnerabilities exist in the final release
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is a core principle of DevSecOps?

   • ASecurity is a separate phase performed after development is complete
   • BSecurity is only applied at the end of the release cycle
   • CSecurity is solely the responsibility of the security team
   • DSecurity is a shared responsibility integrated throughout the development and operations lifecycle
   Reveal Solution Discussion Select an answer first