ITEC 437 FINAL Exam Questions & Revised Correct Answers. Guarantee Pass!!
ITEC 437 FINAL Exam Questions & Revised Correct Answers. Guarantee Pass!! IR Reaction Strategy - ANSWER : procedures for regaining control of systems and restoring operations to normalcy are the heart of the IR plan and the CSIRT's operations. If an organization choose the protect and forget instead of the apprehend and prosecute philosophy, what aspect of IR will be most affected? - ANSWER : The aspect of IR that will be most affected is the data collection tasks. What is the first task the CSIRT leader will undertake on arrival? - ANSWER : Determine whether an incident occured What is the second task the CSIRT leader will undertake? - ANSWER : Analyze precursors and indicators. What is the best thing an organization can do to make its CSIRT most effective? - ANSWER : Be prepared by having a risk assessment and good security measures. What is the first imperative of the CSIRT when there is a confirmed incident? - ANSWER : Incident Containment Why might an organization forego trying to identify the attacking host during an incident response? - ANSWER : To prevent concurrent recurrence and protect assets
Document information
- Uploaded on
- May 14, 2024
- Number of pages
- 27
- Written in
- 2023/2024
- Type
- Exam (elaborations)
- Contains
- Questions & answers