Free Practice Quiz Question List

1 Security Operations Foundations Online Quiz Questions

Use this free practice quiz with 20 questions to review 1 Security Operations Foundations, test your knowledge, and prepare for your next test or exam.

20 questions

True or false

1 point

An organization sets a goal of eliminating every possible cybersecurity threat before it will consider its operations secure. Is this a realistic security operations goal?

A
True
B
False

Choose one

1 point

A security team analyzes unusual system activity to determine whether an attack or compromise may be occurring. Which NIST CSF 2.0 function best describes this work?

A
Respond
B
Detect
C
Protect
D
Recover

Written response

1 point

What is the security principle of using multiple, complementary safeguards so that failure of one control does not automatically expose an important asset?

Choose one

1 point

The same weakness appears in an isolated, low-importance test system and in a customer-facing service that stores sensitive information. Which prioritization best applies the material's risk-assessment approach?

A
Prioritize the test system because any identified weakness should always come first.
B
Give greater priority to the customer-facing service because it stores sensitive information and may have greater exposure and impact.
C
Give both systems the same priority because the technical weakness is identical.
D
Defer both until exploitation is certain.

Choose all

1 point

A team is setting up a security practice lab. Which practices support a safer lab? Select all that apply.

A
Use a dedicated virtual machine or container separated from production systems.
B
Use synthetic accounts and data instead of real credentials or customer records.
C
Expose a deliberately vulnerable service to the public internet for easier access.
D
Practice against unrelated public systems to make the exercise realistic.
E
Take snapshots or backups so the lab system can be restored.

True or false

1 point

The NIST CSF 2.0 functions are continuous and interrelated rather than a one-way checklist.

A
True
B
False

Written response

1 point

Which NIST CSF 2.0 function focuses on restoring affected systems and operations after a disruption?

Choose all

1 point

Within established authority and risk tolerance, which options may an organization use to address a cybersecurity risk? Select all that apply.

A
Reduce the risk
B
Transfer the risk
C
Avoid the risk
D
Accept the risk
E
Ignore the risk without regard to authority or risk tolerance

Choose one

1 point

An organization is setting cybersecurity strategy, defining responsibilities, and establishing policy. Which NIST CSF 2.0 function best fits this work?

A
Identify
B
Protect
C
Govern
D
Detect

Open ended

1 point

During an authorized lab exercise, a test unexpectedly reaches a system that is not included in the agreed scope. What should the team do next, and why?

Choose one

1 point

A team plans to use OWASP WebGoat for security training. Which deployment choice best follows the project's safety guidance?

A
Make it publicly accessible so learners can reach it from any network.
B
Limit its exposure, including disconnecting it from the internet while it is in use.
C
Use it with real customer records to simulate production.
D
Treat it as secure because it is intended for training.

True or false

1 point

True or false: A realistic goal of security operations is to eliminate every possible threat to an organization.

A
True
B
False

Choose one

1 point

An organization is clarifying who is responsible for cybersecurity decisions and setting policy expectations. Which NIST CSF 2.0 function most directly covers this work?

A
Detecting and analyzing possible attacks
B
Setting cybersecurity strategy, expectations, roles, and policy
C
Containing and managing incidents
D
Restoring affected systems and operations

Choose one

1 point

Which approach best illustrates defense in depth for protecting an important account?

A
Relying on a strong password policy as the sole account safeguard
B
Adding more monitoring while leaving access permissions and recovery procedures unchanged
C
Combining appropriate access limits, monitoring, and incident response procedures
D
Replacing all safeguards with a single advanced security product

Written response

1 point

What is the established term for the constraints set before a security test that define which systems and activities are authorized?

Choose one

1 point

Which setup is appropriate for practicing against an intentionally vulnerable training target?

A
Run a vulnerable training service on a public address using a real customer account
B
Use a production server but schedule testing outside business hours
C
Use an isolated virtual machine with synthetic data and restricted network access
D
Test a vulnerable service on an unrelated public website

Written response

1 point

What risk-treatment option applies when an organization decides, within its authority and risk tolerance, to retain a risk rather than reduce, transfer, or avoid it? Enter the treatment term.

Choose one

1 point

The same weakness is found on an isolated, low-importance test system and on a customer-facing service that stores sensitive information. Which system should generally receive higher priority for risk assessment and safeguards?

A
Prioritize the isolated test system because any weakness should receive the same priority
B
Prioritize the customer-facing service because exposure and potential impact can make the weakness more consequential
C
Treat both systems as equal priority because the weakness is technically identical
D
Defer both findings until exploitation is certain

Fill in the blank

1 point

A company’s key assets and the threats facing them have changed since its last review. To keep its understanding current, the team should its cybersecurity risk.

Fill in the blank

1 point

A team uses a risk assessment to help decide which safeguards to prioritize. The assessment supports decisions, but it cannot guarantee about future outcomes.