ISC2 CC Security Operations Basics Quiz

1. Which type of attack attempts to gain unauthorized access by guessing credentials?

SQL injection

Brute force

DDoS

Phishing

2. Which log type is most critical for investigating unauthorized access attempts?

Application logs

Authentication logs

System logs

Firewall logs

3. True or False: Defense in depth strategy relies on a single layer of security controls.

True

False

4. What does the principle of least privilege (PoLP) ensure?

Users have only minimum access needed for their role

All users have equal system access

Administrators have unrestricted access

Password changes occur monthly

5. Which process identifies what assets an organization has and their value?

Asset inventory

Risk assessment

Threat modeling

Penetration testing

6. True or False: A vulnerability that cannot be exploited poses no risk to an organization.

True

False

7. What is the primary advantage of using multi-factor authentication (MFA)?

Reduces login time

Increases security by requiring multiple verification methods

Eliminates phishing attacks

Improves network speed

8. Which principle ensures that individuals are accountable for their actions?

Non-repudiation

Availability

Confidentiality

Integrity

9. What is the goal of conducting a security audit?

Assess compliance with security policies and standards

Increase system performance

Reduce IT budget

Eliminate all risks

10. True or False: Patch management is a continuous process, not a one-time activity.

True

False

11. Which phase of incident response involves identifying and containing a security breach?

Detection and Analysis

Containment, Eradication, and Recovery

Post-Incident Activity

Preparation

12. What is the primary function of a firewall in network security?

Monitor user activity

Control traffic between networks based on rules

Encrypt data in transit

Scan for malware

13. Which security framework provides guidelines for information security management?

ISO/IEC 27001

NIST Cybersecurity Framework

CIS Controls

All of the above

14. True or False: Risk is the product of threat and vulnerability only, without considering impact.

True

False

15. What is the purpose of a threat feed in security operations?

Provide real-time information about emerging threats

Store historical incident data

Authenticate user credentials

Encrypt sensitive data

16. Which control type is designed to prevent a threat from occurring?

Preventive

Detective

Corrective

Compensating

17. True or False: A security baseline is a snapshot of acceptable system configuration at a specific point in time.

True

False

18. What does SIEM stand for?

Security Information and Event Management

System Integration and Event Monitoring

Security Incident Exchange Module

System Information Exchange Management

19. Which of the following is a key responsibility of a Security Operations Center (SOC)?

Physical access control

24/7 monitoring and threat detection

Hardware procurement

User account provisioning

20. What is the primary goal of vulnerability management?

Identify, assess, and remediate security weaknesses

Prevent all cyberattacks

Monitor network traffic

Create backup systems

ISC2 CC Security Operations Basics Quiz

1. Which type of attack attempts to gain unauthorized access by guessing credentials?

2.

What first name or nickname would you like us to use?

2. Which log type is most critical for investigating unauthorized access attempts?

3. True or False: Defense in depth strategy relies on a single layer of security controls.

4. What does the principle of least privilege (PoLP) ensure?

5. Which process identifies what assets an organization has and their value?

6. True or False: A vulnerability that cannot be exploited poses no risk to an organization.

7. What is the primary advantage of using multi-factor authentication (MFA)?

8. Which principle ensures that individuals are accountable for their actions?

9. What is the goal of conducting a security audit?

10. True or False: Patch management is a continuous process, not a one-time activity.

11. Which phase of incident response involves identifying and containing a security breach?

12. What is the primary function of a firewall in network security?

13. Which security framework provides guidelines for information security management?

14. True or False: Risk is the product of threat and vulnerability only, without considering impact.

15. What is the purpose of a threat feed in security operations?

16. Which control type is designed to prevent a threat from occurring?

17. True or False: A security baseline is a snapshot of acceptable system configuration at a specific point in time.

18. What does SIEM stand for?

19. Which of the following is a key responsibility of a Security Operations Center (SOC)?

20. What is the primary goal of vulnerability management?