1. Home
2. All questions
3. Question 55

CISSP study material · question 55 of 500

A bank's board wants to learn how far an intruder could get before the security operations centre reacts, so the exercise must run while operations staff remain unaware of it. The assessors ask what has to be in place before they begin. Which condition governs this kind of exercise?

• Security assessment
• Security operations

1. The system owner authorises the exercise and the target list is shared with the incident response team beforehand
2. Senior management authorises the exercise, and a trusted intermediary can confirm to responders that an attack is the test
3. The assessors authorise their own scope, because covert value is lost once anyone inside the organisation is informed
4. The security operations centre manager authorises the exercise and briefs analysts on the window when attacks will occur

Challenge yourself on this topic → Study as cards