SANS 515 FINAL TEST 2026 QUESTIONS WITH CORRECT
ANSWERS GRADED A+
● Background checks should be conducted before extending an offer to a potential
employee despite the job level. Answer: True
● IAM. Answer: - Ensures security requirements of AIS are implemented
● Vendors or maintenance contractors can always be trusted since they are under
contractual obligation. Accounts setup for vendor diagnostic access should remain
open so the vendor can assist, at any time, with problems.. Answer: False
● Security awareness and security related issues should be reflected as a component
of an employee's performance appraisal to raise their awareness and reflect the
seriousness of security issues. Answer: True
● Job rotation is a tool that requires every employee to be able to perform the work of
at least one other employee. Answer: True
● The concept of "least privilege" is only applied to new employees. Answer: False
● Operational security staff generally never concern themselves with malfunctioning
HVAC, lighting or cipher locks. These are viewed as facilities issues.. Answer: False
● Which of the following would not be a type of backup performed by the Operations
Infrastructure support function. Answer: Remote site backups
● Which of the following is not an element of concern for desktop configuration
management?. Answer: -Disk drive sanitization before redeployment
● Which of the following would not be considered a definite incident indicator?.
Answer: -Loss of availability
● Which of the following is an important question to ask regarding infrastructure
backups?. Answer: -Where are the backups stored?
● Backup technology and the media used to store backups is reliable enough that
periodic testing of backups is really unnecessary.. Answer: False
, ● Which of the following is not a recommended secure way to dispose of disk drivers?.
Answer: -Format the disk drive prior to disposal or redeployment*
● Positive air flow pressurization keeps the air flowing outward when doors are
opened, from an area, so that unwanted air does not flow back into the area. Answer:
True
● Which of the following would not be an important metric for measuring an
organization's physical security risk?. Answer: -The number of false positive detections
and alerts
● What is a mantrap?. Answer: -A logical access control mechanism
● High security controls are designed to impede, detect, assess, and neutralize..
Answer: False
● Which of the following fire suppression systems is more appropriate for use in a data
center?. Answer: -Pre-action sprinkler systems*
● How does halon suppress a fire?. Answer: -Reduces the oxygen in the area
● It is advisable to systematically startup a series of servers so as to avoid a high
surge of current known as an in-rush current. Answer: True
● When should a calls "C" fire extinguisher be used instead of a class A fire
extinguisher. Answer: -When wood and paper are on fire
● Platform as a service typically refers to middle-ware offerings that allow for
developers to build and deploy applications. Answer: True
● Producing a counterfeit product that is intended to fail and produce delays or
irrecoverable events is an example of. Answer: -Espionage
● Supply chain disruption is one of several threats facing a supply chain. Answer: True
● Infrastructure as a service is generally more expensive than on premise
infrastructure. Answer: False
● Many companies are still untrusting with the security of cloud service providers.
Answer: True
● Selective outsourcing implies that all the organization's information systems can be
outsourced. Answer: False
ANSWERS GRADED A+
● Background checks should be conducted before extending an offer to a potential
employee despite the job level. Answer: True
● IAM. Answer: - Ensures security requirements of AIS are implemented
● Vendors or maintenance contractors can always be trusted since they are under
contractual obligation. Accounts setup for vendor diagnostic access should remain
open so the vendor can assist, at any time, with problems.. Answer: False
● Security awareness and security related issues should be reflected as a component
of an employee's performance appraisal to raise their awareness and reflect the
seriousness of security issues. Answer: True
● Job rotation is a tool that requires every employee to be able to perform the work of
at least one other employee. Answer: True
● The concept of "least privilege" is only applied to new employees. Answer: False
● Operational security staff generally never concern themselves with malfunctioning
HVAC, lighting or cipher locks. These are viewed as facilities issues.. Answer: False
● Which of the following would not be a type of backup performed by the Operations
Infrastructure support function. Answer: Remote site backups
● Which of the following is not an element of concern for desktop configuration
management?. Answer: -Disk drive sanitization before redeployment
● Which of the following would not be considered a definite incident indicator?.
Answer: -Loss of availability
● Which of the following is an important question to ask regarding infrastructure
backups?. Answer: -Where are the backups stored?
● Backup technology and the media used to store backups is reliable enough that
periodic testing of backups is really unnecessary.. Answer: False
, ● Which of the following is not a recommended secure way to dispose of disk drivers?.
Answer: -Format the disk drive prior to disposal or redeployment*
● Positive air flow pressurization keeps the air flowing outward when doors are
opened, from an area, so that unwanted air does not flow back into the area. Answer:
True
● Which of the following would not be an important metric for measuring an
organization's physical security risk?. Answer: -The number of false positive detections
and alerts
● What is a mantrap?. Answer: -A logical access control mechanism
● High security controls are designed to impede, detect, assess, and neutralize..
Answer: False
● Which of the following fire suppression systems is more appropriate for use in a data
center?. Answer: -Pre-action sprinkler systems*
● How does halon suppress a fire?. Answer: -Reduces the oxygen in the area
● It is advisable to systematically startup a series of servers so as to avoid a high
surge of current known as an in-rush current. Answer: True
● When should a calls "C" fire extinguisher be used instead of a class A fire
extinguisher. Answer: -When wood and paper are on fire
● Platform as a service typically refers to middle-ware offerings that allow for
developers to build and deploy applications. Answer: True
● Producing a counterfeit product that is intended to fail and produce delays or
irrecoverable events is an example of. Answer: -Espionage
● Supply chain disruption is one of several threats facing a supply chain. Answer: True
● Infrastructure as a service is generally more expensive than on premise
infrastructure. Answer: False
● Many companies are still untrusting with the security of cloud service providers.
Answer: True
● Selective outsourcing implies that all the organization's information systems can be
outsourced. Answer: False
