Exam 8: Reacting to a Cyber Incident: Communication and Incident Recovery

What federal legislation protects user data in Canada?

A review of the change control process and update to the incident response plan should result in a formal written document known as a ________________, which should include all weaknesses that were uncovered and the changes made to address them.

Which of the following containment techniques permits the device to continue functioning and redirects all network communication to a sinkhole so that evidence may continue to be gathered and malware analyzed?

Which of the following U.S. laws helps to protect healthcare information?

What is the term for slicing a hard drive into small pieces using 40,000 pounds of force?

Due to a lack of comprehensive federal regulations for data breach notification, many states have amended their own laws, and no two state laws are the same.

After a hard drive has been sanitized, what process can be used to restore the drive by installing the operating system, application programs, and data files?

Which of the following companies had 3 billion of its user accounts hacked in 2013 and 2014?

_______________ are people with an interest or concern in the organization's actions; unless necessary, communication about a cyber incident should be restricted to them.

Which of the following is not considered a difficulty in determining whether a cyber incident has occurred?