1.4 - Document and Maintain Functional Security Controls SSCP Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   Which of the following is a key element of control documentation?

   • AThe organization's marketing strategy
   • BThe personal contact information of all employees
   • CThe purpose of the control and the owner responsible for it
   • DThe exact password of the administrator account
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An e-commerce company has implemented a web application firewall (WAF) to block SQL injection attacks. The security team also monitors the WAF logs daily to identify any attempted attacks that were not blocked. Which of the following BEST describes the monitoring of WAF logs?

   • AIt is a corrective control because it fixes vulnerabilities.
   • BIt is a preventative control because it blocks SQL injection attacks.
   • CIt is a detective control because it identifies attempted attacks that may have bypassed the WAF.
   • DIt is a deterrent control because it discourages attackers.
   Reveal Solution Discussion Select an answer first
3. 28foundation · easy

   What is the main objective of a preventative control?

   • ATo proactively stop security incidents from occurring
   • BTo discourage attackers from attempting an attack by increasing the perceived risk
   • CTo restore systems to normal operation after an incident has occurred
   • DTo identify and report security incidents after they have occurred
   Reveal Solution Discussion Select an answer first