1.4 - Document and Maintain Functional Security Controls SSCP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is an example of a corrective control?

   • AA security camera that records activity in a data center
   • BAn access control list that denies unauthorized users
   • CA warning banner that informs users of monitoring and penalties
   • DA disaster recovery plan that restores operations after a cyberattack
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company's primary data center is in a region prone to earthquakes. The company has implemented a backup site in a different region to ensure business continuity. However, the backup site does not have the same level of physical security as the primary site. To address this, the company has installed additional surveillance cameras and access controls at the backup site. Which of the following BEST describes the additional surveillance and access controls?

   • ACorrective controls, because they remediate the impact of an earthquake.
   • BDetective controls, because they identify unauthorized access.
   • CCompensating controls, because they provide alternative security measures to address the reduced physical security at the backup site.
   • DDeterrent controls, because they discourage attackers from targeting the backup site.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the purpose of regularly testing security controls?

   • ATo increase the cost of maintaining the controls
   • BTo ensure that controls continue to operate effectively and meet current security requirements
   • CTo replace the need for updating controls
   • DTo satisfy the requirement that all controls be tested monthly
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A government agency has a security control that requires all employees to use smart cards for physical access to the building. The control has been in place for five years. During an annual audit, the agency finds that the smart card readers are outdated and can be bypassed with a simple magnetic stripe card. The agency has a limited budget and must decide how to address this issue. Which of the following actions BEST aligns with the principle of maintaining functional security controls?

   • ARemove the smart card requirement and rely on security guards to verify identities.
   • BUpgrade the smart card readers to the latest model that supports contactless and cryptographic authentication.
   • CKeep the current readers and document that they are still functional.
   • DReplace the smart card system with a simple password-based access control system.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a process for maintaining the effectiveness of security controls?

   • ASetting controls and never changing them to ensure stability
   • BDocumenting controls only once at the time of implementation
   • CTesting controls only after a security incident occurs
   • DReviewing and updating controls in response to changes in the threat landscape
   Reveal Solution Discussion Select an answer first