OFFICIAL (ISC)² CISSP - DOMAIN 7: SECURITY OPERATIONS
EXAM QUESTIONS WITH COMPLETE SOLUTIONS GRADED A++
Change management
A formal, methodical, comprehensive process for requesting, reviewing, and approving
changes to the baseline of the IT environment.
Configuration management (CM)
A formal, methodical, comprehensive process for establishing a baseline of the IT
environment (and each of the assets within that environment).
Honeypots/honeynets
Machines that exist on the network, but do not contain sensitive or valuable data, and
are meant to distract and occupy malicious or unauthorized intruders, as a means of
delaying their attempts to access production data/assets. A number of machines of this
kind, linked together as a network or subnet, are referred to as a "honeynet."
Intrusion detection system (IDS)
A solution that monitors the environment and automatically recognizes malicious
attempts to gain unauthorized access.
Intrusion Prevention System (IPS)
EXAM QUESTIONS WITH COMPLETE SOLUTIONS GRADED A++
Change management
A formal, methodical, comprehensive process for requesting, reviewing, and approving
changes to the baseline of the IT environment.
Configuration management (CM)
A formal, methodical, comprehensive process for establishing a baseline of the IT
environment (and each of the assets within that environment).
Honeypots/honeynets
Machines that exist on the network, but do not contain sensitive or valuable data, and
are meant to distract and occupy malicious or unauthorized intruders, as a means of
delaying their attempts to access production data/assets. A number of machines of this
kind, linked together as a network or subnet, are referred to as a "honeynet."
Intrusion detection system (IDS)
A solution that monitors the environment and automatically recognizes malicious
attempts to gain unauthorized access.
Intrusion Prevention System (IPS)
