Support Secure Operations ISSEP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is an example of a coordination mechanism that supports the incident response process?

   • AA password policy that requires complex passwords
   • BA communication plan that defines how team members share information during an incident
   • CA backup schedule for critical servers
   • DA list of all hardware assets in the organization
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of defining roles and responsibilities within an incident response plan?

   • ATo ensure that each incident is handled by a single individual to avoid confusion
   • BTo document the incident for legal purposes only
   • CTo establish clear accountability and ensure that necessary actions are taken promptly during an incident
   • DTo automate the incident response process so that human intervention is minimized
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A university's IT department is developing an incident response plan. The plan must include procedures for handling incidents that involve student data, which is protected by privacy regulations. What should the plan include to ensure compliance?

   • AA policy that student data incidents are handled internally without external notification.
   • BA requirement to delete all student data immediately after an incident.
   • CProcedures for notifying affected students and regulatory authorities within required timeframes.
   • DA decision to involve law enforcement in every student data incident.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A multinational corporation has incident response teams in different regions. During a cross-border incident, the teams must share sensitive information quickly. However, there are legal restrictions on transferring certain data across borders. What should the incident response plan include to address this?

   • APredefined data-sharing agreements and legal review processes that comply with cross-border data transfer regulations.
   • BA policy that all data must be shared immediately regardless of legal restrictions.
   • CA requirement that each regional team handles incidents independently without sharing information.
   • DA decision to involve law enforcement in every cross-border incident before sharing any data.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A logistics company's IT team must perform routine maintenance on a server that hosts a critical application. The maintenance involves replacing a hardware component that requires the server to be powered off. The company has a backup server that can take over, but failover takes 30 minutes. What is the best approach to minimize downtime and ensure security?

   • APerform the maintenance during a planned maintenance window, initiate failover to the backup server, and verify the backup is operational before starting.
   • BPower off the server immediately and replace the hardware without failover.
   • CPerform the maintenance without notifying users to avoid concern.
   • DDisable security controls on the backup server during failover to speed up the process.
   Reveal Solution Discussion Select an answer first