Exam 11: Incident Handling

arrow
  • Select Tags
search iconSearch Question
flashcardsStudy Flashcards
  • Select Tags

Since the incident response policy is developed following strict procedures including top management approval, its existence generally is an assurance that the organization will respond satisfactorily to an information security incident

Free
(True/False)
4.9/5
(38)
Correct Answer:
Verified

False

An incident is

Free
(Multiple Choice)
4.8/5
(31)
Correct Answer:
Verified

A

In the context of monitoring, a false positive is

Free
(Multiple Choice)
4.9/5
(34)
Correct Answer:
Verified

D

Eradication is

(Multiple Choice)
4.8/5
(36)

The technical members of the IRT are chosen

(Multiple Choice)
4.7/5
(38)

The IRT is

(Multiple Choice)
4.9/5
(38)

Preparation for incident response includes all of the following except

(Multiple Choice)
4.7/5
(40)

During an incident, it is advisable to pull members away from current projects to assist the IRT

(True/False)
4.7/5
(40)

An incident response policy is

(Multiple Choice)
5.0/5
(33)

Log consolidation is useful for

(Multiple Choice)
4.9/5
(34)

The stages of incident handling include

(Multiple Choice)
4.9/5
(34)

In the context of monitoring, a false negative is

(Multiple Choice)
4.9/5
(36)

Performance records of a machine are called

(Multiple Choice)
4.8/5
(32)

Organizations typically become aware of incidents through all the following except

(Multiple Choice)
4.9/5
(22)

During an incident, the IRT is involved with all of the following, except

(Multiple Choice)
4.8/5
(44)

The scope of an incident response policy is

(Multiple Choice)
4.9/5
(41)

According to the need-to-know principle of information management, information provided

(Multiple Choice)
4.7/5
(34)

A disaster is

(Multiple Choice)
4.8/5
(33)

The leader of the IRT is preferably

(Multiple Choice)
4.8/5
(35)

Recovery is

(Multiple Choice)
4.8/5
(31)
Showing 1 - 20 of 25
close modal

Filters

  • Essay(0)
  • Multiple Choice(0)
  • Short Answer(0)
  • True False(0)
  • Matching(0)