ITEC 437 Final Exam Test Questions and Answers Graded A+
Once the CSIRT has been notified and arrives "on scene,"
whether physically or virtually, the first task that must occur True
is an assessment of the situation.
Many practitioners feel that a system, once compromised,
True
can never be restored to a trusted state.
Once a compromised system is disconnected, it is safe
False
from further damage.
The term unauthorized access is a synonym for hacking. False
Automated IR systems to facilitate IR documentation are
True
available through a number of vendors.
Known as , procedures for regaining control of sys-
tems and restoring operations to normalcy are the heart IR reaction strategies
of the IR plan and the CSIRT's operations.
The CSIRT may not wish to "tip ott" attackers that they have
been detected, especially if the organization is following apprehend and prosecute
a(n) approach.
Clittord Stoll's book, , provides an excellent story
about a real-world incident that turned into an interna- The Cuckoo's Egg
tional tale of espionage and intrigue.
When a second attack, using the means and methods of
the first attack is undertaken while the first attack is still Concurrent
underway, this is considered a(n) recurrence.
is a tactic that deliberately permits an attack to con-
tinue while the entire event is observed and additional Watchful waiting
evidence is collected.
A attack is much more substantial than a DoS attack
because of the use of multiple systems to simultaneously distributed denial-of-service
attack a single target.
1/6
, ITEC 437 Final Exam Test Questions and Answers Graded A+
There are a number of professional IR agencies, such
as , that can provide additional resources to help US-CERT
prevent and detect DoS incidents.
is a common indicator of a DoS attack. User reports of system unavailability
A is a small quantity of data kept by a Web site as
a means of recording that a system has visited that Web Cookie
site.
Many malware attacks are attacks, which involve
more than one type of malware and/or more than one blended
type of transmission method.
According to the 2010/2011 Computer Crime and Security
Survey, __ s "the most commonly seen attack, with 67.1 malware infection
percent of respondents reporting it."
Essentially a DoS attack, a is a message aimed at
causing organizational users to waste time reacting to a tracking cookie
nonexistent malware threat.
When an alert warns of new malicious code that tar-
gets software used by an organization, the first response
Real
should be to research the new virus to determine whether
it is .
If a user receives a message whose tone and terminology
seems intended to invoke a panic or sense of urgency, it Hoax
may be a(n) .
Which of the following is the most suitable as a response
Blocking known attackers
strategy for malware outbreaks?
According to NIST, which of the following is an example of
Modifying Web-based content without permission
a UA attack?
Hybrid
2/6
Once the CSIRT has been notified and arrives "on scene,"
whether physically or virtually, the first task that must occur True
is an assessment of the situation.
Many practitioners feel that a system, once compromised,
True
can never be restored to a trusted state.
Once a compromised system is disconnected, it is safe
False
from further damage.
The term unauthorized access is a synonym for hacking. False
Automated IR systems to facilitate IR documentation are
True
available through a number of vendors.
Known as , procedures for regaining control of sys-
tems and restoring operations to normalcy are the heart IR reaction strategies
of the IR plan and the CSIRT's operations.
The CSIRT may not wish to "tip ott" attackers that they have
been detected, especially if the organization is following apprehend and prosecute
a(n) approach.
Clittord Stoll's book, , provides an excellent story
about a real-world incident that turned into an interna- The Cuckoo's Egg
tional tale of espionage and intrigue.
When a second attack, using the means and methods of
the first attack is undertaken while the first attack is still Concurrent
underway, this is considered a(n) recurrence.
is a tactic that deliberately permits an attack to con-
tinue while the entire event is observed and additional Watchful waiting
evidence is collected.
A attack is much more substantial than a DoS attack
because of the use of multiple systems to simultaneously distributed denial-of-service
attack a single target.
1/6
, ITEC 437 Final Exam Test Questions and Answers Graded A+
There are a number of professional IR agencies, such
as , that can provide additional resources to help US-CERT
prevent and detect DoS incidents.
is a common indicator of a DoS attack. User reports of system unavailability
A is a small quantity of data kept by a Web site as
a means of recording that a system has visited that Web Cookie
site.
Many malware attacks are attacks, which involve
more than one type of malware and/or more than one blended
type of transmission method.
According to the 2010/2011 Computer Crime and Security
Survey, __ s "the most commonly seen attack, with 67.1 malware infection
percent of respondents reporting it."
Essentially a DoS attack, a is a message aimed at
causing organizational users to waste time reacting to a tracking cookie
nonexistent malware threat.
When an alert warns of new malicious code that tar-
gets software used by an organization, the first response
Real
should be to research the new virus to determine whether
it is .
If a user receives a message whose tone and terminology
seems intended to invoke a panic or sense of urgency, it Hoax
may be a(n) .
Which of the following is the most suitable as a response
Blocking known attackers
strategy for malware outbreaks?
According to NIST, which of the following is an example of
Modifying Web-based content without permission
a UA attack?
Hybrid
2/6
