Security Operations (Domain 7)
Mike Chapple, David Nils Seidl · 2018
This chapter presents multiple-choice questions related to security operations. One of the questions relates to the security administrator for an ERP system. He is preparing to create accounts for several new employees. Other question relates to an employee who is likely to identify compromised systems on his network that may be participating in a botnet. He plans to do this by watching for connections made to known command and-control servers. The agency recently suffered a security breach and is attempting to build a new information security program. Gary would like to apply some best practices for security operations as he is designing this program. Another question relates to processing access control requests for her organization. She comes across a request where the user does have the required security clearance, but there is no business justification for the access.