ESP Agreements and Forensics Quiz

Which of the following is not typically included in an External Service Provider (ESP) agreement?

• Cloud

• Hardware

• Physical security

What aspect is covered under the implications of ESP agreements regarding data movement across borders?

• Encryption methods

• Disaster recovery procedures

• Geographical location and jurisdiction

Which of the following is NOT an element of security protection within ESP agreements?

• Data security obligations

• Liability for data breaches

• Marketing strategies

What does desktop forensics involve?

• Conducting analysis on network devices

• Collecting evidence from computer systems

• Investigating malware activity

What is one of the challenges of live forensics?

• Losing permanent files

• Capturing data in active memory

• Reviewing system logs

Which methodology needs agreement for network forensics?

• Scanning local infrastructure

• Malware analysis

• Network testing

What should be ensured before scanning local infrastructure during network forensics?

• Disrupting a live system

• Permission is granted

• Reviewing firewall logs

What is NOT a part of the process of desktop forensics?

• Reviewing user activity

• Assessing network topology

• Taking an image of the system

What does network forensics involve reviewing and analyzing?

• Infrastructure devices only

• Client logs only

• Firewalls, infrastructure devices, and logs

Which is NOT a concern during ESP agreements regarding data protection laws?

• Legal ownership and jurisdiction

• Encryption of all data

• Data movement across borders