1.4 - Document and Maintain Functional Security Controls SSCP Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A small business cannot afford a full-featured security information and event management (SIEM) system. Instead, they implement a script that collects logs from critical servers and sends alerts to the IT administrator's email. The script is documented and reviewed quarterly. Which of the following BEST describes this approach?

   • AIt is a corrective control because it fixes security issues.
   • BIt is a deterrent control because it discourages attackers.
   • CIt is a compensating control because it provides a cost-effective alternative to a full SIEM.
   • DIt is a preventative control because it stops security incidents.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security administrator is documenting the controls for a new cloud-based file storage service. The documentation must include the control owner, the purpose of each control, and the frequency of testing. Which of the following is the MOST important reason for including the control owner in the documentation?

   • AIt allows the security team to ignore the control if issues arise.
   • BIt ensures that the control is a preventative control.
   • CIt guarantees that the control will be tested on time.
   • DIt establishes accountability for the control's implementation and maintenance.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A retail company has deployed a new point-of-sale (POS) system. The security team has configured the system to require multi-factor authentication (MFA) for all administrative access, and they have documented the MFA configuration in the system's security baseline. During a quarterly review, the team discovers that the MFA policy was never actually enforced on the POS terminals because the configuration change was not pushed to the devices. Which of the following BEST describes the current state of the MFA control?

   • AIt is a detective control that is functional but not documented.
   • BIt is a deterrent control that is documented but not functional.
   • CIt is a corrective control that is functional and documented.
   • DIt is a preventative control that is documented but not functional.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is an example of a preventative control?

   • AA policy that requires employees to sign an acceptable use agreement
   • BA security camera that records activity in a server room
   • CA backup system that restores data after a ransomware infection
   • DA firewall that blocks traffic from known malicious IP addresses
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A security team is responsible for maintaining a firewall that has been in place for several years. During a routine review, they discover that the firewall rules are outdated and allow traffic that should be blocked. The team has a change management process that requires approval for any rule changes. Which of the following is the MOST appropriate action to maintain the firewall's effectiveness?

   • ADocument the outdated rules and defer action until the next review.
   • BSubmit a change request to update the firewall rules and obtain approval before implementing the changes.
   • CImmediately update the firewall rules without waiting for approval to reduce risk.
   • DDisable the firewall until the rules are updated.
   Reveal Solution Discussion Select an answer first