MidTerm Trivia - Module 5-6

When evaluating risk, there are two factors. One is Likelihood. The other is:

• Impact

• Probability

• Consequence

• Severity

Internal benchmarking compares the company’s historical data against and outside company.

• True

• False

In a crisis, what is the number one concern? (Select the most important one)

• Information

• Economic stability

• Reputation

• Human life

At a minimum, the CSIRT development plan should be reviewed annually.

• False

• True

A _____ is a centralized facility where the organization’s security efforts and technologies are monitored by dedicated technicians.

• Security Operations Center (SOC)

• Data Operations Center (DOC)

• Communication Center (CC)

• Network Monitoring Station (NMS)

A false _____ occurs when an incident that deserves attention is not reported.

• Negative

• Positive

• Alarm

• Report

The book calls it an AAR but it is also referred to as _____ (Pick Two)

• Damage Report

• Root Cause Analysis

• Incident Review

• Disaster Action Report

A decoy application or server used to draw attackers to it and away from actual production systems is called a honeypot?

• honeypot

• firewall

• intrusion detection system

• demilitarized zone

What is the most common detection method for malware?

• Patching

• Antivirus

• Training

• Network Monitoring

An ____ report is a detailed examination of the events that occurred. This includes detection to final recovery.

• Event

• Investigation

• Audit

• After Action Review