CySA Module 9 - Incident Response Planning and Procedures

An online retailer has just discovered a data breach of the system used to store all of the data for shipments of products, including tracking numbers, date shipped, customer names, and addresses. Which of the following has the company failed to protect?

• PRI

• PII

• PCI

• PHI

A startup company has invented a new IoT device and stored the design documents on an internal network share. Which of the following types of data are they trying to protect?

• PII

• PHI

• IP

• PCI

Van has been tasked with designing a fault-tolerant system for a critical application. Which of the following is the biggest concern about the design of this system?

• Downtime

• Recovery time

• Data integrity

• System process criticality

Dahlia has just been hired as a new cybersecurity manager at an organization. Up until now, the organization has not had any formal procedures in place to handle events such as malware or data breaches. Dahlia would like to ensure that everyone follows the same procedures when responding to these events. Which of the following should she create?

• IRP

• DRP

• IP

• CDP

Which of the following regulations does not address notification of individuals or a government entity in the event of a data breach?

The California Consumer Privacy Act does not contain requirements for notification in the event of a data breach.

• GDPR

• PIPEDA

• HIPAA

Tyrese has just been hired as a cybersecurity analyst at a major hospital in Colorado. Which of the following regulations might he need to be familiar with?

• ICO

• PIPEDA

• CCPA

Samuel works for a telecommunications provider in the United States. Which of the following regulations might he need to be familiar with?

• HIPAA

• Sarbanes-Oxley

• GDPR

• PIPEDA

Forming the division, she needs to find a good way to respond to incidents. Which of the following might be the best option in the event that she discovers an extensive APT?

• Delay a response until enough cybersecurity employees can be hired, as the attackers have already been present for some time.

• Quickly hire several new employees to address the issue.

• Respond to the APT by herself.

• Call an incident response provider.

Annya, a cybersecurity analyst, has just pulled a failed hard drive out of a system. She cannot seem to get any applications to overwrite the blocks on the drive with random data. Which of the following methods should she use to ensure the data on the drive is safe from being recovered by unauthorized parties?

• Reimaging

• Sanitization

• Reconstruction

• Secure disposal