SECURITY OPERATIONS EXAMINATION QUESTIONS AND
CORRECT ANSWER&EXPLANATION|GRADED A+ STUDY
GUIDE SOUTHERN NEW HAMPSHIRE UNIVERSITY
1. Security operations primarily focus on:
A. Building software
B. Monitoring and defending systems
C. Accounting tasks
D. Hardware manufacturing
Answer: B
Rationale: Security operations protect and monitor systems.
2. Security Operations Center (SOC) is responsible for:
A. Detecting and responding to threats
B. Marketing systems
C. Software design
D. Hardware installation
Answer: A
Rationale: SOC handles security monitoring and response.
3. The first step in incident response is:
A. Detection
B. Recovery
C. Eradication
D. Reporting
Answer: A
Rationale: Incidents must be identified first.
4. Security monitoring is used to:
,A. Identify suspicious activity
B. Increase CPU speed
C. Install software
D. Manage storage
Answer: A
Rationale: Monitoring detects anomalies.
5. SIEM stands for:
A. Security Information and Event Management
B. System Internet Email Module
C. Secure Internal Encryption Manager
D. System Information Entry Method
Answer: A
Rationale: SIEM collects and analyzes logs.
6. SIEM tools are used for:
A. Log correlation and alerting
B. File editing
C. Software coding
D. Hardware repair
Answer: A
Rationale: Central security analysis.
7. A security event is:
A. Any observable occurrence in a system
B. Always an attack
C. Always harmless
D. Hardware failure
Answer: A
Rationale: Events may or may not be threats.
8. A security incident is:
, A. Confirmed harmful event
B. System upgrade
C. Backup process
D. Normal login
Answer: A
Rationale: Incidents impact security.
9. False positive means:
A. Alert with no real threat
B. Missed attack
C. Real breach
D. System crash
Answer: A
Rationale: Incorrect alert.
10. False negative means:
A. Real attack not detected
B. Fake alert
C. System update
D. Normal event
Answer: A
Rationale: Detection failure.
11. IDS stands for:
A. Intrusion Detection System
B. Internal Data Server
C. Internet Defense System
D. Integrated Device System
Answer: A
Rationale: Detects malicious activity.
12. IPS stands for:
CORRECT ANSWER&EXPLANATION|GRADED A+ STUDY
GUIDE SOUTHERN NEW HAMPSHIRE UNIVERSITY
1. Security operations primarily focus on:
A. Building software
B. Monitoring and defending systems
C. Accounting tasks
D. Hardware manufacturing
Answer: B
Rationale: Security operations protect and monitor systems.
2. Security Operations Center (SOC) is responsible for:
A. Detecting and responding to threats
B. Marketing systems
C. Software design
D. Hardware installation
Answer: A
Rationale: SOC handles security monitoring and response.
3. The first step in incident response is:
A. Detection
B. Recovery
C. Eradication
D. Reporting
Answer: A
Rationale: Incidents must be identified first.
4. Security monitoring is used to:
,A. Identify suspicious activity
B. Increase CPU speed
C. Install software
D. Manage storage
Answer: A
Rationale: Monitoring detects anomalies.
5. SIEM stands for:
A. Security Information and Event Management
B. System Internet Email Module
C. Secure Internal Encryption Manager
D. System Information Entry Method
Answer: A
Rationale: SIEM collects and analyzes logs.
6. SIEM tools are used for:
A. Log correlation and alerting
B. File editing
C. Software coding
D. Hardware repair
Answer: A
Rationale: Central security analysis.
7. A security event is:
A. Any observable occurrence in a system
B. Always an attack
C. Always harmless
D. Hardware failure
Answer: A
Rationale: Events may or may not be threats.
8. A security incident is:
, A. Confirmed harmful event
B. System upgrade
C. Backup process
D. Normal login
Answer: A
Rationale: Incidents impact security.
9. False positive means:
A. Alert with no real threat
B. Missed attack
C. Real breach
D. System crash
Answer: A
Rationale: Incorrect alert.
10. False negative means:
A. Real attack not detected
B. Fake alert
C. System update
D. Normal event
Answer: A
Rationale: Detection failure.
11. IDS stands for:
A. Intrusion Detection System
B. Internal Data Server
C. Internet Defense System
D. Integrated Device System
Answer: A
Rationale: Detects malicious activity.
12. IPS stands for:
