CISSP - Security Operations

Betsy is a security operations analyst at a major company and wishes to conduct a network vulnerability scan to identify security deficiencies in their environment. Which one of the following tools would best help her achieve this objective?

• Zenmap

• Nmap

• Nessus

• Isof

What is the first step in the incident response process?

• Detection

• Reporting

• Recovery

• Response

Alan is developing the access control system for a new accounting system and implements a control that mandates that no individual may have both the permission to create a new vendor and issue a check. What security principle is most directly related to his actions?

• Defense in depth

• Least privilege

• Seperation of duties

• Need to know

What is the purpose of the Business Impact Assessment

• To create a document to be used to help understand what impact a disruptive event would have on the business

• To define a strategy to minimize the effect of disturbances and to allow for the resumption of business processes

• To emphasize the organization’s commitment to its employees and vendors

• To work with executive management to establish a DRP policy

What is considered the major disadvantage to employing a hot-site for disaster recovery?

• Exclusivity is assured for processing at the site.

• Maintaining the site is expensive.

• The site is immediately available for recovery.

• Annual testing is required to maintain the site.