Generate Documentation and Standard Operating Procedures. CYBERSECURITY-DEFENSE-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a best practice for maintaining documentation after a significant change to a security tool or process?

   • AWait until the next scheduled review cycle to update the documentation.
   • BCreate a new document for the change and leave the old one unchanged.
   • COnly update the documentation if someone complains.
   • DUpdate the relevant documentation promptly and notify affected users.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of version control for documentation?

   • ATo track changes and ensure users are referencing the current version.
   • BTo make documents longer and more detailed.
   • CTo automatically correct spelling errors.
   • DTo limit who can read the document.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   You are creating a new SOP for 'Endpoint Isolation'. The document must be easy to navigate and ensure that all necessary information is included. Which set of sections best follows the standard SOP structure?

   • AAbstract, Methodology, Results, Discussion, References.
   • BIntroduction, History, Tools, Troubleshooting, Conclusion.
   • CPurpose, Scope, Roles and Responsibilities, Step-by-Step Procedure, References.
   • DOverview, Detailed Steps, Contact List, Revision History.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   Your organization is updating its incident response SOPs. The SOC manager wants a formal review and approval workflow, but the legal team has limited availability and can only review documents once a month. The SOC manager also wants to ensure that urgent changes (e.g., a new malware signature) can be published quickly. What is the best workflow to balance these constraints?

   • AEstablish a two-tier workflow: standard changes require full review, while urgent changes can be published with a 'pending legal review' status and a mandatory follow-up review.
   • BPublish all changes immediately and conduct a retrospective review at the end of the quarter.
   • CRequire full review and approval by all stakeholders, including legal, for every change, regardless of urgency.
   • DAllow the SOC manager to approve all changes without legal review, since they have the final authority.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   Your security team has a large library of SOPs. A recent audit found that several SOPs are outdated, but the team is small and has limited time for documentation maintenance. The audit also requires that all SOPs be reviewed at least annually. What is the most effective maintenance strategy to ensure compliance without overwhelming the team?

   • AConduct a single, comprehensive review of all SOPs once a year, and update them all at that time.
   • BHave a single person review all SOPs annually, since they are the most familiar with the content.
   • CReview SOPs only when a change is requested or an issue is reported, and skip the annual review requirement.
   • DAssign each SOP to an owner and schedule a quarterly review of a subset of SOPs, so that all are reviewed within the year.
   Reveal Solution Discussion Select an answer first