Support Secure Operations ISSEP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A financial services firm must perform emergency maintenance on a firewall that is experiencing performance issues. The maintenance requires a configuration change that could temporarily disrupt network connectivity. The firm has a business continuity plan that requires critical systems to remain available. What is the most appropriate action?

   • ADisable the firewall temporarily to avoid the configuration change.
   • BPerform the change without a rollback plan to save time.
   • CApply the change immediately without notifying stakeholders to resolve the issue quickly.
   • DImplement the change during a planned maintenance window with a rollback plan and notify affected stakeholders.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following best describes the primary purpose of continuous monitoring in a security engineering context?

   • ATo automate all security controls so that manual oversight is no longer necessary
   • BTo maintain an ongoing awareness of the security posture by collecting and analyzing security-related information on a recurring basis
   • CTo ensure that all security incidents are prevented before they occur
   • DTo replace the need for periodic risk assessments by providing real-time threat intelligence feeds
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A defense contractor operates a hybrid cloud environment and must maintain a continuous monitoring capability that provides real-time visibility into security-relevant events across both on-premises and cloud workloads. The security team is small, and the organization wants to avoid maintaining separate monitoring tools for each environment. Which approach best satisfies the requirement?

   • AUse the cloud provider's native monitoring service for cloud resources and rely on periodic manual reviews of on-premises logs.
   • BImplement separate monitoring tools for each environment and have analysts manually correlate alerts during weekly meetings.
   • CDeploy a SIEM platform that aggregates logs and alerts from both on-premises and cloud sources, with automated correlation rules and a unified dashboard.
   • DOutsource all monitoring to a managed security service provider (MSSP) without defining internal processes for response.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A hospital's IT department must perform emergency maintenance on a critical patient-monitoring system. The maintenance requires a brief system restart, which will cause a temporary outage. The hospital has a policy that all maintenance must be performed without compromising patient safety or data integrity. What is the most appropriate action before proceeding?

   • AProceed immediately with the restart because the maintenance is urgent and cannot be delayed.
   • BCoordinate with clinical staff to schedule the restart during a period of low patient activity and ensure backup systems are available.
   • CDisable all security controls on the system during maintenance to speed up the process.
   • DPerform the restart without notifying anyone to avoid alarming staff.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A manufacturing company's IT team must perform routine maintenance on a server that hosts a critical production database. The maintenance involves applying security patches that require a reboot. The company has a strict service-level agreement (SLA) that limits downtime. What is the best approach to ensure the maintenance is secure and minimizes downtime?

   • APerform the maintenance without a backup to save time.
   • BDisable the database's security features during maintenance to speed up the process.
   • CSchedule the maintenance during a planned maintenance window, back up the database, and test the patches in a staging environment first.
   • DApply the patches immediately without testing to reduce the maintenance window.
   Reveal Solution Discussion Select an answer first