Support Secure Operations ISSEP Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A utility company must perform maintenance on a SCADA system that controls critical infrastructure. The maintenance requires a software update that could affect system stability. The company has strict regulatory requirements for system availability and safety. What is the best approach to ensure secure maintenance?

   • ADisable safety controls during maintenance to speed up the process.
   • BDevelop a detailed maintenance plan that includes risk assessment, testing in a non-production environment, and a rollback strategy.
   • CApply the update directly to the production system to minimize downtime.
   • DPerform the maintenance without notifying regulatory authorities.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A cloud service provider must design a continuous monitoring capability for its customers. The provider wants to offer a service that gives customers visibility into their own workloads while also protecting the provider's underlying infrastructure. Which design best meets this requirement?

   • AGive customers full access to all monitoring data, including the provider's infrastructure logs.
   • BAllow customers to configure monitoring rules on the provider's infrastructure.
   • CMonitor only the provider's infrastructure and provide customers with no monitoring capabilities.
   • DProvide customers with a monitoring dashboard that shows security events from their own workloads, while the provider monitors the underlying infrastructure separately.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A multinational corporation has an incident response team that operates in multiple countries. During a security incident, the team must share evidence with authorities in different jurisdictions. The corporation wants to ensure that evidence is handled consistently and legally. What should the incident response plan include?

   • AA global evidence-handling policy that complies with local laws and includes procedures for chain of custody and cross-border transfer.
   • BA decision to destroy evidence after the incident to avoid legal complications.
   • CA requirement that each regional team follows its own evidence-handling procedures.
   • DA policy that evidence is shared with authorities only after the incident is fully resolved.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A retail company is implementing continuous monitoring for its e-commerce platform. The platform experiences high traffic during sales events, and the security team wants to ensure that monitoring does not degrade performance. What is the best approach?

   • ADisable monitoring during peak traffic to avoid performance impact.
   • BUse a non-scalable monitoring tool that is simple to manage.
   • CUse a scalable monitoring solution that can handle peak loads and prioritize alerts based on risk.
   • DMonitor only a sample of traffic during peak times to reduce load.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A government agency is required to implement continuous monitoring for its information systems. The agency has a mix of on-premises and cloud systems, and the security team is small. The agency wants to ensure that monitoring is effective without overburdening the team. What is the best approach?

   • AUse a single monitoring tool that does not integrate with all systems.
   • BRequire manual log reviews for all systems to ensure thoroughness.
   • CAutomate monitoring processes where possible and use a centralized dashboard to reduce manual effort.
   • DMonitor only cloud systems, as they are more likely to be targeted.
   Reveal Solution Discussion Select an answer first