ECIH questions with correct answers

Information Asset - correct answer A piece of information identified as important to an organization. Examples include trade secrets, patents, personal information, and business ideas. IH&R Process Flow - correct answer 1. Preparation 2. Recording and Assignment 3. Triage 4. Notification 5. Containment 6. Evidence Gathering and Forensic Analysis 7. Eradication 8. Recovery 9. Post-incident Activities Promiscuous Policy - correct answer This type of policy does not impose any restrictions on the usage of system resources. Incident Handling Criteria - correct answer These include a set of checklists, tables, cheat-sheets, and flow charts that help in decision-making during IH&R procedures. Permissive Policy - correct answer This type of policy begins wide open and only the known dangerous services/attacks or behaviors are blocked. Incident Triage Process Flow - correct answer 1. Analysis and Validation 2. Classification 3. Prioritization