Generate Documentation and Standard Operating Procedures. CYBERSECURITY-DEFENSE-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   You are writing an SOP for 'Threat Hunting'. The primary audience is a team of experienced threat hunters, but the document will also be reviewed by a compliance auditor who is not a security expert. How should you write the document to serve both audiences?

   • AWrite the document at a basic level for the auditor, and provide a separate, more technical document for the threat hunters.
   • BWrite the document at an intermediate level, hoping that both the auditor and the threat hunters can understand it.
   • CWrite the document with a high-level executive summary for the auditor, followed by detailed technical sections for the threat hunters.
   • DWrite the document using advanced threat hunting terminology and assume the auditor will understand the context.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary purpose of establishing documentation standards for security processes and procedures?

   • ATo make documents longer and more detailed.
   • BTo restrict access to security procedures.
   • CTo ensure all documents are written by the same person.
   • DTo ensure documents are consistent, readable, and maintainable across the organization.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   In a standard operating procedure, which section specifies the situations to which the procedure applies and any limitations?

   • APurpose
   • BReferences
   • CScope
   • DSteps
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   You are documenting a new malware containment process. The process involves isolating an infected host, collecting forensic evidence, and then reimaging the host. The security team needs to know exactly when to escalate to management and what information to pass along. What should you include in the process documentation to meet this need?

   • AA table of roles and responsibilities, listing who performs each step, with a footnote that escalation procedures are handled verbally.
   • BA narrative description of the containment steps, emphasizing the importance of speed and caution, without formal decision points.
   • CA flowchart showing the containment steps, with decision diamonds for escalation triggers and annotations specifying the information to record and pass to management at each branch.
   • DA list of the tools used for isolation and evidence collection, with a note to contact management if the malware is unknown.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary purpose of a review and approval workflow for security documentation?

   • ATo assign a version number to the document.
   • BTo limit the number of people who can read the document.
   • CTo speed up the documentation process by skipping reviews.
   • DTo ensure the document is accurate, complete, and meets organizational standards.
   Reveal Solution Discussion Select an answer first