1.3 - Identify and Implement Security Controls SSCP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A multinational company operates in several countries with different data protection laws. The security team is tasked with ensuring the company meets all legal obligations. Which approach is the most effective for assessing compliance?

   • ARely on the company's existing security policies without modification.
   • BCreate a compliance matrix that maps each applicable law to the organization's controls and processes.
   • CAdopt the most restrictive law from any country and apply it globally.
   • DConduct an annual penetration test to identify security weaknesses.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which activity is part of a periodic audit and review process for security controls?

   • AInstalling a new firewall without testing it
   • BReviewing audit logs to identify unauthorized access attempts
   • CDeleting all historical security logs to save storage
   • DDisabling security alerts to reduce noise
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is implementing a new access control system for its office building. The system should allow only authorized employees to enter during business hours and should also provide a record of who entered. Which combination of controls achieves this?

   • ACCTV cameras at the entrance with no access control.
   • BA security guard who visually verifies each employee's ID.
   • CA sign-in sheet at the reception desk.
   • DElectronic badge readers with time-based restrictions and an audit log of access events.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of security cameras as a physical control?

   • ATo physically block entry to a restricted area
   • BTo deter and record unauthorized physical access attempts
   • CTo authenticate individuals using biometric data
   • DTo detect and alert on network intrusions
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security manager is planning the annual review of physical security controls. The review should assess whether the controls are still effective and identify any gaps. Which activity is most appropriate for this review?

   • AInterview employees about their password habits.
   • BConduct a walkthrough of the facility to inspect locks, cameras, and access control systems.
   • CReview the firewall logs for any security incidents.
   • DReview the organization's business continuity plan.
   Reveal Solution Discussion Select an answer first