1.3 - Identify and Implement Security Controls SSCP Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security manager is reviewing the effectiveness of the organization's firewall rules. The manager wants to ensure the rules are still aligned with current business needs and have not become overly permissive. Which activity best supports this review?

   • AInstall a network-based intrusion detection system (IDS) to monitor traffic.
   • BRequire all employees to change their passwords every 90 days.
   • CConduct a periodic audit of firewall rule changes and compare them against the approved change requests.
   • DIncrease the logging level on the firewall to capture all traffic.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company's data center hosts a critical application server. The security team wants to prevent unauthorized physical access to the server rack while also detecting any attempt to tamper with the server hardware. Which combination of controls best achieves this objective?

   • ADeploy an intrusion detection system (IDS) on the network and require two-factor authentication for remote access.
   • BPlace a lock on the server rack and install a closed-circuit television (CCTV) camera focused on the rack.
   • CImplement a biometric scanner at the facility entrance and enforce a clean desk policy.
   • DInstall a smart card reader on the data center door and deploy motion sensors inside the facility.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company is designing a new facility that will house a high-security research lab. The lab contains sensitive intellectual property. The design must prevent unauthorized physical access and also detect any attempt to breach the perimeter. Which combination of physical controls is most effective?

   • AMantrap at the entrance, biometric authentication, and CCTV coverage of all entry points.
   • BA security policy requiring all employees to wear ID badges.
   • CA single locked door with a keypad and a security guard at the reception desk.
   • DCCTV cameras only, with no physical access control.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is an example of a compliance requirement that an organization might need to assess?

   • AA biometric lock on the server room door
   • BA security awareness poster displayed in the break room
   • CA firewall configuration that blocks all inbound traffic
   • DA data protection regulation that mandates how personal data must be handled
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security team is conducting a quarterly review of the organization's intrusion detection system (IDS) alerts. The goal is to reduce false positives and ensure the IDS is tuned to the organization's environment. Which activity is most effective for this review?

   • AAnalyze the alert data to identify patterns and adjust the IDS rules accordingly.
   • BReplace the IDS with a firewall.
   • CIncrease the sensitivity of the IDS to catch more potential threats.
   • DDisable the IDS during peak business hours to reduce alert volume.
   Reveal Solution Discussion Select an answer first