CISSP Practice Question (Domain 7: Security Operations)
The night shift SOC analyst reports that the CEO is locked in his office. The physical access control system's AI module misclassified his valid after-hours badge swipe as anomalous and triggered an automated lockdown response. What should you do FIRST?
A. Grant the CEO permanent access override authority to bypass automated controls
B. Release the lockdown and document the false positive for automated response review
C. Escalate to facilities management since physical access is their responsibility
D. Disable the automated lockdown capability until the AI classification model is retrained
Come back for the answer tomorrow, or study more now!
0
25 comments
Vincent Primiani
7
CISSP Practice Question (Domain 7: Security Operations)
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by