Exam 12: Appendix: Managing the Security Process

CSIRTs rehearse an incident by talking about what should be done without actually doing it in ________.

Companies should ________ single points of takeover.

The goal of security is to eliminate risk.

Allowing a user access to edit files in a specific directory is an example of ________.

An attacker must break through two firewalls to get to a host.This most specifically illustrates the ________ principle.

There should be relatively free access ________.

There is a single countermeasure in ________.

Which of the following is easiest to understand?

Oversight activities include ________.

CSIRT leaders should come from ________.

Live rehearsals are important because they ________ compared to desktop rehearsals.

________ are actions people can take on a resource.

Device IDSs typically send log files to the central IDS log file using the ________ protocol.

The Target attackers probably first broke into Target using the credentials of a(n)________.

Which department will almost always be involved in a CSIRT?

Servers in the Demilitarized Zone (DMZ)are rarely attacked by clients on the Internet.

To address uniformity of credentials verification throughout a large company,credentials verification information is usually stored in a single ________.

A building with some unlocked exterior doors most specifically violates the principle of ________.

The policy server creates ________.

Errors in assigning permission are reduced if assignments are based on ________.