Input for an Information Security Management System (ISMS) CT-STE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a way security testing supports incident management?

   • ABy automatically patching vulnerabilities.
   • BBy providing a direct line to law enforcement.
   • CBy identifying potential attack paths that could be used by attackers.
   • DBy determining the root cause of an incident.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An organization has implemented a new web application firewall (WAF) as a security control. The ISMS manager wants to verify that the control is working as intended. Which security testing activity provides the most direct evidence of control effectiveness?

   • AConducting a vulnerability scan of the web application.
   • BInterviewing the system administrator about WAF incidents.
   • CReviewing the WAF configuration against the vendor's best practices.
   • DPerforming penetration testing with attack payloads that the WAF is designed to block.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization has implemented multi-factor authentication (MFA) for remote access. To evaluate the effectiveness of this control, which security testing approach is most appropriate?

   • AChecking the MFA vendor's marketing materials.
   • BAttempting to bypass MFA during a penetration test.
   • CReviewing the MFA policy and procedures.
   • DSurveying users about their satisfaction with MFA.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security test reveals that a recurring misconfiguration in database servers allows unauthorized access. The root cause is a lack of standardized configuration templates. As part of the ISMS continuous improvement cycle, what should the organization do?

   • ADocument the finding and wait for the next scheduled security test.
   • BIncrease the frequency of security tests to catch the misconfiguration more often.
   • CAssign the finding to the database administrators for a one-time fix.
   • DImplement a corrective action to develop and enforce configuration standards.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How can security testing inputs support incident management?

   • ABy preventing all incidents from occurring.
   • BBy replacing the need for an incident response plan.
   • CBy providing detection capabilities and forensic evidence.
   • DBy automatically responding to incidents.
   Reveal Solution Discussion Select an answer first