3.4 - Operate and Monitor Security Platforms (e.g., Continuous Monitoring) SSCP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a source system that generates security-relevant data?

   • AA network cable
   • BA network firewall
   • CA database table
   • DA power supply
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is a capability of a SIEM platform?

   • AAggregating logs from multiple sources
   • BManaging firewall rules
   • CEncrypting data at rest
   • DPerforming vulnerability scans
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary function of a SIEM platform?

   • AReal-time monitoring of security events across the infrastructure
   • BConfiguring network devices
   • CStoring backups of critical data
   • DManaging user passwords
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the goal of tuning logging systems?

   • ATo disable logging to save resources
   • BTo capture relevant events while minimizing noise and storage overhead
   • CTo increase log retention indefinitely
   • DTo capture every possible event
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A hospital's security team is deploying a SIEM to monitor its network. They need to include data from the EHR application, the firewall, the Active Directory domain controllers, and the badge-access system for physical entry. Which action best ensures the SIEM receives the necessary security-relevant data from all these sources?

   • AInstall agents on every workstation and server to capture all local event logs and forward them to the SIEM.
   • BAsk the EHR vendor to email daily log summaries to the security team for manual review.
   • CConfigure syslog forwarding on the firewall and domain controllers, and use API connectors for the EHR and badge systems.
   • DEnable SNMP traps on all devices and configure the SIEM to receive them as the primary log source.
   Reveal Solution Discussion Select an answer first