6.3 Define Common Security Operations Terms (e.g., Event, Alert, SOC, DevSecOps, Incident Response Plan, Disaster Recovery Plan) CYBERSECURITY-APPRENTICE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which statement best defines a disaster recovery plan?

   • AA documented process to restore IT infrastructure and operations after a disaster
   • BA centralized team responsible for monitoring and responding to security incidents
   • CA documented set of procedures to detect, respond to, and recover from security incidents
   • DA practice that integrates security into the DevOps process
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which statement best describes DevSecOps?

   • AA centralized team that monitors and responds to security incidents
   • BA tool that automatically patches software vulnerabilities
   • CA documented plan for recovering from a disaster
   • DA practice that integrates security into the DevOps process
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A security information and event management (SIEM) system detects multiple failed login attempts from an external IP address and sends a message to the security team. In security operations terminology, what is this message called?

   • AAn alert
   • BAn incident
   • CA false positive
   • DAn event
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   An organization creates a document that specifies roles, communication steps, and containment actions to follow when a security breach occurs. What is this document called?

   • ADisaster recovery plan
   • BDevSecOps policy
   • CIncident response plan
   • DSecurity Operations Center (SOC)
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which statement best describes a Security Operations Center (SOC)?

   • AA framework for integrating security into the software development lifecycle
   • BA documented set of procedures for recovering from a disaster
   • CA centralized team responsible for monitoring and responding to security incidents
   • DA software tool used to automate software deployment
   Reveal Solution Discussion Select an answer first