Question 1

Conversations with ____________________ help identify the skills and abilities of the team,as well as the specific needs of the end users.

Accepted Answer

stakeholders

Question 2

Which of the following is a proactive service?

Accepted Answer

A)  Announcements
B)  Risk analysis
C)  Incident handling
D)  Alerts and warnings

Question 3

Match each statement with an item below.
-Important because cooperation and coordination are necessary for successful incident response.

Accepted Answer

A)  Distributed incident response teams
B)  Teamwork skills
C)  Education and awareness
D)  IR plan
E)  After-action reviewF) Full-interruption testingG) CatalystH) BlackholeI) Semtex B

Question 4

What are the advantages and disadvantages of outsourcing the incident response process?

Accepted Answer

Advantages
Services provided by professi...

Question 5

List five tasks that prevent attacks on the desktop.

Accepted Answer

Keeping your antivirus software up to date
Using spyware detection software
Working with system administrators to keep operating system and applications up to date with patches and updates
Not opening suspect e-mail attachments
Avoiding social engineering attacks by not providing critical information over the phone or e-mail
Not downloading and installing unauthorized software or software from untrusted sources
Protecting passwords and classified information

Question 6

Match each statement with an item below.
-Responsible for handling incidents for a particular logical or physical segment of the organization.

Accepted Answer

A)  Distributed incident response teams
B)  Teamwork skills
C)  Education and awareness
D)  IR plan
E)  After-action reviewF) Full-interruption testingG) CatalystH) BlackholeI) Semtex

Question 7

Organizing the incident response planning process begins with staffing the disaster recovery committee.

Accepted Answer

A) True 
 B)False

Question 8

Proactive services are the core component of CSIRT work.

Accepted Answer

A) True 
 B)False

Question 9

Match each statement with an item below.
-Too risky for most businesses.

Accepted Answer

A)  Distributed incident response teams
B)  Teamwork skills
C)  Education and awareness
D)  IR plan
E)  After-action reviewF) Full-interruption testingG) CatalystH) BlackholeI) Semtex

Question 10

Which of the following is a reactive service?

Accepted Answer

A)  Announcements
B)  Risk analysis
C)  Awareness building
D)  Alerts and warnings

Question 11

____ services provide assistance and information to help prepare,protect,and secure constituent systems in anticipation of attacks,problems,or events.

Accepted Answer

A)  Proactive
B)  Security
C)  Reactive
D)  Forensic

Question 12

A(n) ____ is a detailed examination of the events that occurred from first detection to final recovery.

Accepted Answer

A)  after-action review
B)  reactive review
C)  proactive review
D)  audit review

Question 13

For every attack scenario end case,the IR team creates the incident plan made up of three sets of incident-handling procedures.Briefly discuss these procedures.

Accepted Answer

During the incident: The planners develo...

Question 14

What is the difference between parallel testing and full interruption testing?

Accepted Answer

In the parallel test,individuals act as ...

Question 15

A(n) ____ is a detailed set of processes and procedures that anticipate,detect,and mitigate the effects of an unexpected event that might compromise information resources and assets.

Accepted Answer

A)  announcement plan
B)  awareness plan
C)  risk analysis plan
D)  incident response plan

Question 16

A favorite pastime of information security professionals is ____,which is realistic,head-to-head attack and defend information,security attacks,and incident response methods.

Accepted Answer

A)  simulation
B)  war gaming
C)  parallel testing
D)  structured walk-through

Question 17

____ services augment existing and well-established services that are independent of incident handling and traditionally performed by other areas of an organization such as the IT,Audit,or Training departments.

Accepted Answer

A)  Proactive
B)  Security quality management
C)  Reactive
D)  Forensic

Question 18

The incident response policy defines the roles and responsibilities for incident response for the SIRT and others who will be mobilized in the activation of the plan.

Accepted Answer

A) True 
 B)False

Question 19

Match each statement with an item below.
-This war game challenges players with various levels requiring binary object analysis.

Accepted Answer

A)  Distributed incident response teams
B)  Teamwork skills
C)  Education and awareness
D)  IR plan
E)  After-action reviewF) Full-interruption testingG) CatalystH) BlackholeI) Semtex

Question 20

Match each statement with an item below.
-Usually activated when an incident causes minimal damage with little or no disruption to business operations.

Accepted Answer

A)  Distributed incident response teams
B)  Teamwork skills
C)  Education and awareness
D)  IR plan
E)  After-action reviewF) Full-interruption testingG) CatalystH) BlackholeI) Semtex

Exam 3: Incidence Response: Preparation, Organization, and Prevention

Conversations with ____________________ help identify the skills and abilities of the team,as well as the specific needs of the end users.

Correct Answer
verified
stakeholders

Which of the following is a proactive service?

Correct Answer
verified

Match each statement with an item below. -Important because cooperation and coordination are necessary for successful incident response.

Correct Answer
verified
B

What are the advantages and disadvantages of outsourcing the incident response process?

Correct Answer
verified
Advantages
Services provided by professi...
View Answer

List five tasks that prevent attacks on the desktop.

Match each statement with an item below. -Responsible for handling incidents for a particular logical or physical segment of the organization.

Correct Answer
verified

Organizing the incident response planning process begins with staffing the disaster recovery committee.

Correct Answer
verified

Proactive services are the core component of CSIRT work.

Correct Answer
verified

Match each statement with an item below. -Too risky for most businesses.

Correct Answer
verified

Which of the following is a reactive service?

Correct Answer
verified

____ services provide assistance and information to help prepare,protect,and secure constituent systems in anticipation of attacks,problems,or events.

Correct Answer
verified

A(n) ____ is a detailed examination of the events that occurred from first detection to final recovery.

Correct Answer
verified

For every attack scenario end case,the IR team creates the incident plan made up of three sets of incident-handling procedures.Briefly discuss these procedures.

Correct Answer
verified
During the incident: The planners develo...
View Answer

What is the difference between parallel testing and full interruption testing?

Correct Answer
verified
In the parallel test,individuals act as ...
View Answer

A(n) ____ is a detailed set of processes and procedures that anticipate,detect,and mitigate the effects of an unexpected event that might compromise information resources and assets.

Correct Answer
verified

A favorite pastime of information security professionals is ____,which is realistic,head-to-head attack and defend information,security attacks,and incident response methods.

Correct Answer
verified

____ services augment existing and well-established services that are independent of incident handling and traditionally performed by other areas of an organization such as the IT,Audit,or Training departments.

Correct Answer
verified

The incident response policy defines the roles and responsibilities for incident response for the SIRT and others who will be mobilized in the activation of the plan.

Correct Answer
verified

Match each statement with an item below. -This war game challenges players with various levels requiring binary object analysis.

Correct Answer
verified

Match each statement with an item below. -Usually activated when an incident causes minimal damage with little or no disruption to business operations.

Correct Answer
verified

Exam 3: Incidence Response: Preparation, Organization, and Prevention

Conversations with ____________________ help identify the skills and abilities of the team,as well as the specific needs of the end users.

Correct Answerverifiedstakeholders

Which of the following is a proactive service?

Correct AnswerverifiedShow Answer

Match each statement with an item below. -Important because cooperation and coordination are necessary for successful incident response.

Correct AnswerverifiedB

What are the advantages and disadvantages of outsourcing the incident response process?

Correct AnswerverifiedAdvantagesServices provided by professi...View AnswerShow Answer

List five tasks that prevent attacks on the desktop.

Match each statement with an item below. -Responsible for handling incidents for a particular logical or physical segment of the organization.

Correct AnswerverifiedShow Answer

Organizing the incident response planning process begins with staffing the disaster recovery committee.

Correct AnswerverifiedShow Answer

Proactive services are the core component of CSIRT work.

Correct AnswerverifiedShow Answer

Match each statement with an item below. -Too risky for most businesses.

Correct AnswerverifiedShow Answer

Which of the following is a reactive service?

Correct AnswerverifiedShow Answer

____ services provide assistance and information to help prepare,protect,and secure constituent systems in anticipation of attacks,problems,or events.

Correct AnswerverifiedShow Answer

A(n) ____ is a detailed examination of the events that occurred from first detection to final recovery.

Correct AnswerverifiedShow Answer

For every attack scenario end case,the IR team creates the incident plan made up of three sets of incident-handling procedures.Briefly discuss these procedures.

Correct AnswerverifiedDuring the incident: The planners develo...View AnswerShow Answer

What is the difference between parallel testing and full interruption testing?

Correct AnswerverifiedIn the parallel test,individuals act as ...View AnswerShow Answer

A(n) ____ is a detailed set of processes and procedures that anticipate,detect,and mitigate the effects of an unexpected event that might compromise information resources and assets.

Correct AnswerverifiedShow Answer

A favorite pastime of information security professionals is ____,which is realistic,head-to-head attack and defend information,security attacks,and incident response methods.

Correct AnswerverifiedShow Answer

____ services augment existing and well-established services that are independent of incident handling and traditionally performed by other areas of an organization such as the IT,Audit,or Training departments.

Correct AnswerverifiedShow Answer

The incident response policy defines the roles and responsibilities for incident response for the SIRT and others who will be mobilized in the activation of the plan.

Correct AnswerverifiedShow Answer

Match each statement with an item below. -This war game challenges players with various levels requiring binary object analysis.

Correct AnswerverifiedShow Answer

Match each statement with an item below. -Usually activated when an incident causes minimal damage with little or no disruption to business operations.

Correct AnswerverifiedShow Answer

Correct Answer
verified
stakeholders

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified
Advantages
Services provided by professi...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
During the incident: The planners develo...
View Answer

Correct Answer
verified
In the parallel test,individuals act as ...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified