4.1 Establish and Maintain Security Operations Center ISSMP Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A SOC is designing a playbook for a data breach involving customer personal data. The playbook must comply with regulatory requirements for breach notification. Which element is MOST important to include in the playbook?

   • AThe SOC's mission statement and objectives.
   • BA list of all customers whose data might be affected.
   • CA description of the technical cause of the breach.
   • DSpecific steps for notifying regulatory authorities and affected individuals within the required timeframes.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of maintaining comprehensive documentation for a security operations center (SOC)?

   • ATo create a permanent record of all security incidents for legal purposes
   • BTo replace the need for formal training of new SOC analysts
   • CTo provide a reference for consistent, repeatable, and auditable SOC operations
   • DTo satisfy regulatory requirements for data retention
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A SOC analyst receives an alert for a potential phishing email that bypassed the email gateway and was delivered to several users. The analyst needs to know the exact steps to contain the threat, including isolating affected endpoints and resetting user credentials. What should the analyst consult?

   • AThe SOC's standard operating procedure for email monitoring.
   • BThe phishing incident playbook.
   • CThe SOC's incident response policy.
   • DThe SOC's documentation maintenance schedule.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is an example of a SOC playbook?

   • AA step-by-step guide for responding to a ransomware infection
   • BA list of approved security tools and their configurations
   • CA record of all security incidents from the past quarter
   • DA document that defines the SOC's mission and objectives
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which element is essential to include in a SOC policy to ensure it is actionable and enforceable?

   • AA detailed network diagram of the organization
   • BA list of all current SOC analysts and their contact information
   • CClear roles and responsibilities for SOC personnel
   • DThe exact version numbers of all security tools in use
   Reveal Solution Discussion Select an answer first