6.3 Define Common Security Operations Terms (e.g., Event, Alert, SOC, DevSecOps, Incident Response Plan, Disaster Recovery Plan) CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A software company wants to embed security practices into its existing continuous integration and continuous deployment (CI/CD) pipeline so that security checks are automated and performed by developers alongside functional testing. Which approach best aligns with this goal?

   • AImplement a disaster recovery plan
   • BAdopt DevSecOps practices
   • CEstablish a SOC
   • DCreate an incident response plan
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A software company wants to ensure that security checks are performed automatically during the continuous integration and continuous delivery (CI/CD) pipeline. Which practice best aligns with this goal?

   • ASecurity Operations Center (SOC)
   • BIncident Response Plan
   • CDevSecOps
   • DDisaster Recovery Plan
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In the context of security operations, which statement best defines an event?

   • AA documented procedure for responding to a security incident
   • BA confirmed security breach that has caused damage to an organization
   • CAny observable occurrence in a system or network
   • DA notification generated by a monitoring system that requires immediate action
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which statement best defines an incident response plan?

   • AA practice that integrates security into the DevOps process
   • BA documented process to restore IT infrastructure and operations after a disaster
   • CA centralized team responsible for monitoring and responding to security incidents
   • DA documented set of procedures to detect, respond to, and recover from security incidents
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which statement best defines an alert in the context of security operations?

   • AA notification triggered by a security event that requires attention
   • BAny observable occurrence in a system or network
   • CA documented plan for recovering from a disaster
   • DA confirmed security breach that has caused damage
   Reveal Solution Discussion Select an answer first