Generate Documentation and Standard Operating Procedures. CYBERSECURITY-DEFENSE-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which role is typically responsible for approving a security procedure before it is finalized?

   • AAny team member who has read the document.
   • BAn external auditor.
   • CThe author of the document only.
   • DA designated approver, such as a security manager or team lead.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security analyst has made several edits to an SOP draft. The SOC manager wants to see exactly what changes were made and by whom before approving the document. What is the most effective way to track these changes?

   • AAsk the analyst to summarize the changes in an email to the SOC manager.
   • BHave the analyst print the document and mark up the changes by hand, then scan it for the manager.
   • CUse a document management system that tracks revisions, showing the author, timestamp, and specific changes made to the document.
   • DSave a new copy of the document with a different filename each time a change is made, and ask the manager to compare the files.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the key consideration when tailoring documentation for a non-technical audience, such as executive management?

   • AUse the same terminology as for security analysts.
   • BFocus on business impact and use plain language with minimal jargon.
   • CAssume the audience understands all security concepts.
   • DInclude detailed technical steps and commands.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   Your security team has drafted a new SOP for handling phishing reports. Before it is published, it must be reviewed by the SOC manager, the legal team, and a senior analyst. The SOC manager wants to ensure the review is documented and that all feedback is incorporated. What is the most effective review and approval workflow?

   • AEmail the draft to all reviewers simultaneously, collect their feedback in separate emails, and manually incorporate changes into the final document.
   • BPublish the document immediately and ask for feedback after two weeks, then update it in a future revision.
   • CHave the SOC manager review the document alone, since they have final authority, and then publish it directly.
   • DUse a document collaboration tool with version history, assign review tasks to each stakeholder, and require formal approval from the SOC manager before publishing.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   You are documenting a complex incident response process that involves multiple teams and handoffs. The process has several decision points where the outcome depends on the type of incident. The documentation must be accurate and easy to follow, and it must be approved by all team leads. What is the most effective way to document this process?

   • AWrite a separate SOP for each team involved, and do not document the overall process flow.
   • BCreate a flowchart that visually maps the process, including decision diamonds and handoff points, and use it as the primary documentation.
   • CDocument the process as a list of steps without showing the decision points, and rely on the team leads to know the correct path.
   • DWrite a detailed narrative describing the process, including all decision points, and ask each team lead to review the text.
   Reveal Solution Discussion Select an answer first