While reviewing logs, you notice unusual traffic that might indicate a security risk. What should you do?

• Log the issue in the system and wait for the relevant person to handle it

• Wait for an official incident report and take action

• Notify the responsible team and follow up until it’s resolved

• Investigate but avoid raising concerns unless you’re sure

Your manager assigns you multiple tasks with tight deadlines. An urgent, unexpected security issue also arises. How should you approach this?

• Work on everything very fast to show your dedication

• Jump to the new urgent task immediately

• First of all - use one of existing techniques to prfioritize what is most urgent and important

• Ask your manager to prioritize for you

You discover a security misconfiguration that could be exploited. However, you are concerned that reporting it might make the responsible team look bad. What do you do?

• Fix it yourself to avoid unnecessary conflict or tell it to that team

• Report it immediately and suggest a solution

• Mention it only if the issue actually leads to an incident

• Send an anonymous message so no one knows who raised the concern

During an ongoing cyberattack, you need immediate input from a senior engineer. What is the most effective way to reach them?

• Send an urgent email

• Post a message in the team chat and wait for someone to reply

• Log the issue in a tracking system and move on to other tasks

• Call them directly or use a priority alert in chat

You have a security improvement idea that could reduce response time to incidents. However, you’re still a newbie and not sure if it’s worth mentioning. What’s your best course of action?

• Validate the idea directly with your team or even leadership if relevant

• Wait for your manager to ask for ideas before speaking up

• Discuss it informally with colleagues first to gauge their reaction

• Keep it to yourself unless you’re absolutely sure it will work

Your team manually compiles security reports every week, which takes some time (to ensure high quality). How do you handle this?

• Find ways to complete the reports faster using existing methods

• Follow the current process as there is a reason it’s done this way!

• Ask leadership if it’s okay to spend time improving the process

• Explore automation options and suggest an improved workflow

You accidentally apply a security policy that causes access issues for some users. What’s the best response?

• Quickly revert the change and avoid drawing attention to it

• Wait to see if users report the problem before taking action

• Admit the mistake, correct it, and inform the team about what happened

• Report the issue but emphasize that unclear documentation led to the mistake

You need deep focus for security analysis, but constant chat notifications are distracting you. What should you do?

• Mute notifications permanently to avoid interruptions

• Try multitasking, you can do it!

• Check messages less frequently but respond when you see them

• Set focus hours using some of the existing techniques

During a security audit, you discover that a third-party vendor uses outdated software from a country with weak cybersecurity regulations. What is your best course of action?

• Report it to your manager and suggest alternative

• Keep using it, but advise the team to be extra cautious

• As it’s not your responsibility - you should focus on your assigned tasks

• Uninstall the software immediately

A teammate suggests fully automating a critical security review process, but you’re unsure of the risks. What’s the best approach?

• Apply full automation as its optimizes the flow

• Test a partial automation approach while keeping human oversight

• Ignore the idea because automation always increases risk

• Let the idea sit for a while to see if others support it