🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 11 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Your organization runs its workloads on AWS and aggregates CloudTrail and VPC Flow Logs into a central SIEM. After investigating GuardDuty alerts, you confirmed that an IAM access key has been compromised and used to enumerate S3 buckets. You must communicate the findings to multiple stakeholder groups, including senior executives, application owners, and the cloud operations team. Which communication approach best aligns with security-assessment reporting best practices for diverse stakeholders?

  • Update the risk register but wait to brief stakeholders until all remediation steps are complete to avoid unnecessary alarm.

  • Prepare a written report with an executive summary focused on business impact for leadership and a separate technical section detailing indicators of compromise, affected resources, and step-by-step remediation for operations.

  • Post an informal message in the company chat channel describing the incident to avoid creating discoverable documents.

  • Email a single file to all recipients that contains the full CloudTrail and VPC Flow Logs so everyone has identical, unfiltered data.

ISC2 Systems Security Certified Practitioner (SSCP)
Risk Identification, Monitoring and Analysis
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot