ISC Practice Test 15 — 15 Questions

Question 1

For an organization to maintain compliance with the GLBA (Gramm-Leach-Bliley Act), which mechanism within Azure Key Vault is required to demonstrate evidence of 'Key Rotation' and 'Access History'?

Accepted Answer

Azure Monitor Diagnostic Settings. Azure Key Vault logs accessed via Azure Monitor and Log Analytics provide the necessary evidence for key management compliance.

Answer

Key Vault Backup

Answer

Key Vault Access Policies

Answer

Azure Active Directory B2C

Question 2

When drafting an organizational 'Acceptable Use Policy' (AUP), which element is most critical to ensure legal enforceability in a professional environment?

Accepted Answer

Mandatory user acknowledgment signature. A signed acknowledgement of the AUP is necessary to establish legal evidence that the user was aware of the policy expectations.

Answer

Inclusion of the entire ISO 27001 standard

Answer

A list of blocked websites

Answer

Detailed technical specifications of the firewall

Question 3

An organization wants to monitor its compliance with CIS Benchmarks automatically. Which tool is best suited to provide an automated 'Compliance Score' against these benchmarks in a multi-cloud environment?

Accepted Answer

Microsoft Defender for Cloud. Microsoft Defender for Cloud provides automated assessments against industry standards, including CIS Benchmarks.

Answer

Azure Resource Graph

Answer

Microsoft Purview Data Map

Answer

Azure Network Watcher

Question 4

An organization uses Microsoft Sentinel. To ensure that an automated incident response playbook only triggers when a high-severity alert originates from a specific production subnet, where should the condition be defined?

Accepted Answer

In the Automation Rule trigger condition. The logic app trigger conditions or the Sentinel Automation Rule 'If' conditions allow filtering based on alert properties like severity and entity fields.

Answer

In the Azure Policy definitions

Answer

In the Sentinel Data Connector configuration

Answer

Inside the KQL query of the analytic rule

Question 5

Which THREE components should be included in an application security requirements document?

Accepted Answer

Authentication requirements (e.g., MFA). Requirements must include authentication, authorization, and data encryption standards to ensure the application is secure by design.

Answer

The marketing tagline for the product

Answer

The number of features to include

Question 6

Which leadership style is most effective for building a strong security team during a period of rapid organizational growth?

Accepted Answer

Transformational leadership. Transformational leadership inspires the team, fosters innovation, and aligns individual efforts with the broader security vision, which is essential during times of change.

Answer

Transaction-based leadership

Answer

Laissez-faire leadership

Answer

Autocratic leadership

Question 7

As an ISSMP developing a security governance program, which THREE of the following activities are essential to ensure the program remains effective and compliant?

Accepted Answer

Establishing a formal security steering committee. Governance requires continuous monitoring, clear policy oversight, and defined accountability structures, which are achieved through these three activities.

Answer

Directly managing all firewall configurations manually

Answer

Increasing the number of help desk tickets handled daily

Question 8

Which risk response strategy is being employed when a company purchases cyber insurance?

Accepted Answer

Transference. Transferring the financial impact of a risk to a third party is risk transference (sharing).

Answer

Acceptance

Answer

Avoidance

Answer

Mitigation

Question 9

A risk assessment reveals that a legacy system stores PII without encryption. The business cannot replace it. What is the most appropriate risk management action?

Accepted Answer

Implement compensating controls. Mitigating the risk (compensating controls) is the standard professional approach when avoidance is not feasible.

Answer

Avoid the risk

Answer

Transfer the risk

Answer

Accept the risk

Question 10

In the context of risk reporting, what does a 'Risk Heat Map' effectively communicate to the board?

Accepted Answer

The relative prioritization of risks across the enterprise. A heat map visualizes the distribution of risks based on likelihood and impact, helping board members prioritize investment.

Answer

The history of past audit findings

Answer

The exact cost of every security control

Answer

Technical vulnerability lists

Question 11

In a decentralized organization, which approach to BCP management ensures both local agility and global alignment?

Accepted Answer

A federated model with a centralized governance framework.. A federated model allows individual business units to customize plans to their specific needs while adhering to a common global framework/policy.

Answer

Leaving BCP entirely to the discretion of local department managers.

Answer

A strictly centralized command-and-control model.

Answer

Outsourcing the entire BCP function to a single managed service provider.

Question 12

An ISSMP is overseeing a BCP program and notes that the current Business Impact Analysis (BIA) is heavily focused on RTO but lacks a critical dependency mapping for cross-functional business processes. Which specific action should the ISSMP prioritize to address the systemic risk of cascading failure during a disaster?

Accepted Answer

Initiate a value chain analysis using the SCOR model to identify inter-process dependencies.. BIA must move beyond simple RTO/RPO metrics to identify upstream and downstream process dependencies to ensure that recovery orchestration remains viable.

Answer

Implement a redundant secondary site for all identified Tier 1 applications.

Answer

Update the BIA to include qualitative impact assessments for all business units.

Answer

Mandate an immediate increase in the frequency of full-scale BCP simulation exercises.

Question 13

During a disaster recovery simulation for a hybrid cloud environment, you discover that the automated orchestration tool fails to restore dependencies in the correct order because the cloud provider's metadata tags were purged. What is the most effective administrative control to prevent this during a real event?

Accepted Answer

Enforce mandatory tagging policies using AWS Service Control Policies (SCPs) or Azure Policy.. Maintaining configuration drift control and metadata persistence through Infrastructure as Code (IaC) is essential for automated recovery.

Answer

Increase the RTO buffer time in the Service Level Agreement (SLA).

Answer

Switch from automated restoration to manual snapshot-based restores.

Answer

Implement a manual verification step in the Disaster Recovery Plan (DRP) documentation.

Question 14

An organization must comply with CCPA/CPRA requirements regarding 'Right to Delete'. In a hybrid environment utilizing Google Cloud Platform, which mechanism is best suited for implementing automated lifecycle policies to satisfy deletion requests across Cloud Storage buckets?

Accepted Answer

Cloud Storage Lifecycle Management rules. Lifecycle management policies in Cloud Storage are the standard way to automate data deletion based on specific conditions to meet privacy regulations.

Answer

Cloud IAM condition policies

Answer

VPC Service Controls

Answer

Data Loss Prevention (DLP) API scan-only mode

Question 15

In Rapid7 InsightVM, what is the best way to categorize assets into groups based on their business function for targeted vulnerability reporting?

Accepted Answer

Dynamic Asset Groups. Asset groups allow for logical organization of infrastructure based on attributes like department or function.

Answer

User role

Answer

Scan template

Answer

Site configuration