1. What is the purpose of network traffic analysis in security
operations?
A. To identify and block malicious activity on the network
B. To encrypt all data in transit across the network
C. To ensure compliance with network security policies
D. To identify potential vulnerabilities in network devices
Answer: A) To identify and block malicious activity on the network
Rationale: Network traffic analysis helps identify suspicious or
malicious activity in network communications, enabling security teams
to block or mitigate potential threats.
2. What is the purpose of security awareness training in an
organization?
A. To reduce the number of vulnerabilities in software
B. To ensure that employees follow best practices and recognize
potential threats
C. To monitor employee activities on the network
D. To implement strong encryption for company data
Answer: B) To ensure that employees follow best practices and
recognize potential threats
,Rationale: Security awareness training educates employees on
recognizing and responding to security threats like phishing and social
engineering, promoting a culture of security.
3. What is the purpose of encryption in security operations?
A. To prevent unauthorized access to data during transmission or
storage
B. To identify vulnerabilities in a system
C. To detect malware on a system
D. To block unauthorized users from accessing a system
Answer: A) To prevent unauthorized access to data during
transmission or storage
Rationale: Encryption protects sensitive data by converting it into an
unreadable format, ensuring that only authorized parties can access or
read it, whether in transit or at rest.
4. Which of the following is an example of a technical security control?
A. Security awareness training
B. Firewalls
C. Incident response procedures
D. Security policies and procedures
Answer: B) Firewalls
, Rationale: Technical security controls include hardware or software-
based security measures, such as firewalls, intrusion
detection/prevention systems (IDS/IPS), and encryption tools.
5. Which of the following is a key characteristic of an effective disaster
recovery plan?
A. A single recovery strategy for all types of disasters
B. Regular testing to ensure effectiveness and preparedness
C. Limiting the number of employees involved in the plan
D. Allowing employees to independently restore systems
Answer: B) Regular testing to ensure effectiveness and preparedness
Rationale: Effective disaster recovery plans must be regularly tested to
ensure that they work as intended and that the organization is prepared
for various disaster scenarios.
6. Which type of security testing would best help identify weaknesses
in a web application?
A. Penetration testing
B. Compliance auditing
C. Social engineering
D. Physical security assessments
Answer: A) Penetration testing
operations?
A. To identify and block malicious activity on the network
B. To encrypt all data in transit across the network
C. To ensure compliance with network security policies
D. To identify potential vulnerabilities in network devices
Answer: A) To identify and block malicious activity on the network
Rationale: Network traffic analysis helps identify suspicious or
malicious activity in network communications, enabling security teams
to block or mitigate potential threats.
2. What is the purpose of security awareness training in an
organization?
A. To reduce the number of vulnerabilities in software
B. To ensure that employees follow best practices and recognize
potential threats
C. To monitor employee activities on the network
D. To implement strong encryption for company data
Answer: B) To ensure that employees follow best practices and
recognize potential threats
,Rationale: Security awareness training educates employees on
recognizing and responding to security threats like phishing and social
engineering, promoting a culture of security.
3. What is the purpose of encryption in security operations?
A. To prevent unauthorized access to data during transmission or
storage
B. To identify vulnerabilities in a system
C. To detect malware on a system
D. To block unauthorized users from accessing a system
Answer: A) To prevent unauthorized access to data during
transmission or storage
Rationale: Encryption protects sensitive data by converting it into an
unreadable format, ensuring that only authorized parties can access or
read it, whether in transit or at rest.
4. Which of the following is an example of a technical security control?
A. Security awareness training
B. Firewalls
C. Incident response procedures
D. Security policies and procedures
Answer: B) Firewalls
, Rationale: Technical security controls include hardware or software-
based security measures, such as firewalls, intrusion
detection/prevention systems (IDS/IPS), and encryption tools.
5. Which of the following is a key characteristic of an effective disaster
recovery plan?
A. A single recovery strategy for all types of disasters
B. Regular testing to ensure effectiveness and preparedness
C. Limiting the number of employees involved in the plan
D. Allowing employees to independently restore systems
Answer: B) Regular testing to ensure effectiveness and preparedness
Rationale: Effective disaster recovery plans must be regularly tested to
ensure that they work as intended and that the organization is prepared
for various disaster scenarios.
6. Which type of security testing would best help identify weaknesses
in a web application?
A. Penetration testing
B. Compliance auditing
C. Social engineering
D. Physical security assessments
Answer: A) Penetration testing
