What is the primary purpose of the management response in a security audit report?

To acknowledge audit findings and outline corrective actions

What is the primary purpose of a security audit?

To verify that a system meets security goals and/or compliance requirements

Which of the following audits would give prospective customers the most confidence about your security posture?

A SOC2 audit performed by external auditors

Which of the following best describes the Security Cycle?

A continuous process of securing,monitoring,auditing and improving security

studbud

Chapter 10

10 termsStudBud Administration32 plays

Imported from external platform

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
What is the primary purpose of the management response in a security audit report?
To summarize the auditor’s personal opinions on security policies
To provide technical details of how the audit was conducted
To acknowledge audit findings and outline corrective actions
To dispute all findings and request a re-audit
2
Which of these is NOT an example of real-time security monitoring?
Network Intrusion Detection System
System Logs
Data Loss Prevention
Email malware filters
3
Many organizations turn off logs because they produce too much information
True
False
4
In which type of testing does the tester not have any knowledge of the target's design?
Black-box testing
Red-box testing
White-box testing
Gray-box testing
5
You can audit against your own security objectives or against standard benchmarks such as PCI DSS, ISO 27001, SOC2, etc.
False
True
6
In the Security Testing roadmap, what do you do immediately after completing network mapping?
Mitigation
Reconnaissance
Vulnerability Testing
Penetration Testing
7
What is the purpose of security monitoring?
To enhance user experience
To detect abnormalities
To manage software updates
To improve system performance
8
What is the primary purpose of a security audit?
To monitor employee internet activity in real time
To develop new encryption algorithms for data protection
To permanently eliminate all cybersecurity threats
To verify that a system meets security goals and/or compliance requirements
9
Which of the following audits would give prospective customers the most confidence about your security posture?
A SOC2 audit performed by external auditors
A SOC1 audit performed by internal auditors
A SOC2 audit performed by internal auditors
A SOC1 audit performed by external auditors
10
Which of the following best describes the Security Cycle?
A one-time security audit that eliminates all future risks
A reactive approach that addresses security issues after an incident
A continuous process of securing,monitoring,auditing and improving security
A framework used for physical security assessments

Chapter 10 Flashcards | StudBud