ITIL 4 Specialist Collaborate Assure and Improve

ITIL 4 Specialist Collaborate Assure and Improve practice questions, page 3 of 3, with answer review and explanations.

Question 11

An organization has a public website where customers can make purchases. The website has daily automated vulnerability assessments to make sure that it is protected from known attacks, and to detect some types of security breach. What additional automation should the organization implement to help ensure security incidents are detected quickly?

  1. Use regular automated vulnerability assessments to detect missing patches and updates
  2. Automatically switch services away from any compromised servers to provide continual service to customers
  3. Use automated data forensic tools to collect and save evidence before investigating incidents
  4. Analyse transactions to identify unusual or unexpected customer behavior

Question 12

To support an audit, an information security consultant wants to share with relevant teams a list of additional controls that are needed to protect the organization’s assets. What type of tool is BEST to assist with this?

  1. Workflow management and collaboration tools
  2. Monitoring and event management tools
  3. Orchestration systems
  4. SIEM tools