1.4 - Document and Maintain Functional Security Controls SSCP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security administrator is creating documentation for a new access control system. The documentation must include the control's purpose, the system components, the configuration settings, and the procedures for testing and maintenance. Which of the following is the PRIMARY benefit of this comprehensive documentation?

   • AIt guarantees that the control will prevent all security incidents.
   • BIt eliminates the need for regular security audits.
   • CIt enables consistent implementation, testing, and maintenance of the control over time.
   • DIt allows the security team to bypass the control when needed.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A hospital's security team has implemented a network intrusion detection system (IDS) to monitor traffic for signs of malicious activity. The IDS generates alerts that are reviewed by the security operations center (SOC). During a review, the team notices that the IDS is generating a high number of false positives, causing the SOC to miss a real intrusion. Which of the following is the MOST appropriate action to maintain the effectiveness of this detective control?

   • ATune the IDS signatures and thresholds to reduce false positives while maintaining detection capability.
   • BDisable the IDS to prevent alert fatigue among the SOC staff.
   • CReplace the IDS with a firewall to block malicious traffic.
   • DIncrease the number of SOC analysts to review all alerts manually.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the main purpose of a corrective control?

   • ATo discourage attackers from attempting an attack by increasing the perceived risk
   • BTo proactively stop security incidents from occurring
   • CTo identify and report security incidents after they occur
   • DTo remediate or reduce the impact of a security incident
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following best describes a compensating control?

   • AA control that discourages attackers by increasing the perceived risk
   • BA control that restores systems to a secure state after an incident
   • CA control that detects and reports security incidents after they occur
   • DAn alternative security measure used when the primary control is not feasible
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is an example of a detective control?

   • AA firewall that blocks unauthorized inbound traffic
   • BA security awareness training program for employees
   • CA log review process that identifies unauthorized access attempts
   • DA backup restoration procedure that recovers data after a breach
   Reveal Solution Discussion Select an answer first