A SOC manager is establishing a process for maintaining SOC documentation. The manager wants to ensure that documentation is reviewed and updated regularly. Which approach is BEST?

Schedule periodic reviews of all documentation and require updates whenever significant changes occur.

Use a version control system to track changes, but do not schedule reviews.

Review documentation only when a new threat is identified.

Assign each analyst to update one document per year.

A SOC team is designing a playbook for responding to a ransomware incident. The playbook must be practical and effective. Which element should the playbook include to ensure it is actionable?

A list of all employees who might be affected by ransomware.

A high-level overview of the ransomware threat landscape.

Step-by-step instructions that include specific commands, tools, and decision points.

A description of the SOC's mission and objectives.

Why is it important to regularly review and update SOC documentation?

To ensure that all documents are stored in a single location

To ensure the documentation remains accurate and relevant to current operations

To satisfy the requirement for annual employee performance reviews

To increase the length of the documents for compliance purposes

Information Systems Security Management Professional

Domain 4Objective 1

4.1 Establish and Maintain Security Operations Center ISSMP Practice Questions (Page 6)

Part of the Security Operations domain, which accounts for 18% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~13–22 in this domain), expect 4–7 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

18%of the exam

Questions 26–28

26application · medium
A SOC manager is establishing a process for maintaining SOC documentation. The manager wants to ensure that documentation is reviewed and updated regularly. Which approach is BEST?
Select an answer first
27application · medium
A SOC team is designing a playbook for responding to a ransomware incident. The playbook must be practical and effective. Which element should the playbook include to ensure it is actionable?
Select an answer first
28foundation · easy
Why is it important to regularly review and update SOC documentation?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

4.1 Establish and Maintain Security Operations Center ISSMP Practice Questions (Page 6)

Questions 26–28

A SOC manager is establishing a process for maintaining SOC documentation. The manager wants to ensure that documentation is reviewed and updated regularly. Which approach is BEST?

A SOC team is designing a playbook for responding to a ransomware incident. The playbook must be practical and effective. Which element should the playbook include to ensure it is actionable?

Why is it important to regularly review and update SOC documentation?

Keep studying — Security Operations