CYBR 4330(ADVANCED CYBERSECURITY OPERATIONS AND
DEFENSE) TEST 2 | QUESTIONS AND ANSWERS | VERIFIED AND
WELL DETAILED ANSWERS | LATEST EXAM UPDATE
hot site - CORRECT ANSWER - A resumption location known as a is a
fully configured computer facility capable of establishing operations at a
moment's notice.
NIST - CORRECT ANSWER - is a valuable resource for additional
information on building and staffing CSIRTs
Disaster Recovery Plan - CORRECT ANSWER - A deals with the
preparation for and recovery from a disaster whether natural or man-made.
Business Impact Analysis - CORRECT ANSWER - The is an
investigation and assessment of the impact that carious events or incidents can
have on the organization.
Recovery Point Objective - CORRECT ANSWER - The is the point in
time by which systems and data must be recovered after an outage as
determined by the business unit.
write blocker - CORRECT ANSWER - Because it is possible for investigators
to confuse the suspect and destination disks when performing imaging, and to
preclude any grounds for challenging the image output, it is common practice to
protect the suspect media using a .
False - CORRECT ANSWER - Laws governing search and seizure in the
public sector are much more straightforward than those in the private sectors.
,snapshot - CORRECT ANSWER - A continuously changing process present
challenges in acquisition, as there is not a fixed state that can be collected,
hashed and so forth. This has given rise to the concept of forensics which
captures a point-in-time picture of a process.
True - CORRECT ANSWER - Ignorance of policy is a legal excuse for an
employee.
field notes - CORRECT ANSWER - A forensics team typically uses two
methods to document a scene as it exists at the time of arrival: photography and
.
Forensics Toolkit (FTK) - CORRECT ANSWER - The forensic tool does
extensive pre-processing of evidence items that recovers deleted files and
extracts e-mail messages.
expectation of privacy - CORRECT ANSWER - A search is constitutional if it
does not violate a person's reasonable or legitimate.
O'Connor v. Ortega - CORRECT ANSWER - The legal decision that
establishes the start point for "warrantless" workplace searches is the Supreme
Court's complex ruling in .
affidavit - CORRECT ANSWER - Many private sector organizations require a
format statement, called a(n) , which provides search authorization and
furnishes much of the same information usually found in a public sector search
warrant.
Root cause analysis - CORRECT ANSWER - is the determination of the
initial flaw or vulnerability that allowed an incident to occur.
, FBI - CORRECT ANSWER - The handles computer crimes that are
categorized as felonies.
bitstream - CORRECT ANSWER - Forensic investigators use copying
when making a forensics image of a device, which reads a sector (or block; 512
bytes on most devices) from the source drive and writes it to the target drive;
this process continues until all sectors on the suspect drive have been copied.
True - CORRECT ANSWER - Within the private sector, the Supreme Court
state, "Every warrantless workplace search must be evaluated carefully on its
facts. In general, however, law enforcement officer can conduct warrantless
search of private (i.e., nongovernment) workplaces only if the officers obtain
the consent of either the employer or another employee with common authority
over the area searched."
eDiscovery - CORRECT ANSWER - is defined as the search for,
collection, and review of items stored in electronic (or, more precisely, digital)
format that are of potential evidentiary value based on criteria specified by a
legal team.
volatility - CORRECT ANSWER - The stability of information over time is
called its .
Evidence seals - CORRECT ANSWER - In evidence handling, specifically
designed are helpful because they are very difficult to remove without
breaking.
lockdown - CORRECT ANSWER - When an incident includes a breach of
physical security, all aspects of physical security should be escalated under a
containment strategy known as .
hybrid - CORRECT ANSWER - A(n) attack is a method of combining
attacks with rootkits and back doors.
DEFENSE) TEST 2 | QUESTIONS AND ANSWERS | VERIFIED AND
WELL DETAILED ANSWERS | LATEST EXAM UPDATE
hot site - CORRECT ANSWER - A resumption location known as a is a
fully configured computer facility capable of establishing operations at a
moment's notice.
NIST - CORRECT ANSWER - is a valuable resource for additional
information on building and staffing CSIRTs
Disaster Recovery Plan - CORRECT ANSWER - A deals with the
preparation for and recovery from a disaster whether natural or man-made.
Business Impact Analysis - CORRECT ANSWER - The is an
investigation and assessment of the impact that carious events or incidents can
have on the organization.
Recovery Point Objective - CORRECT ANSWER - The is the point in
time by which systems and data must be recovered after an outage as
determined by the business unit.
write blocker - CORRECT ANSWER - Because it is possible for investigators
to confuse the suspect and destination disks when performing imaging, and to
preclude any grounds for challenging the image output, it is common practice to
protect the suspect media using a .
False - CORRECT ANSWER - Laws governing search and seizure in the
public sector are much more straightforward than those in the private sectors.
,snapshot - CORRECT ANSWER - A continuously changing process present
challenges in acquisition, as there is not a fixed state that can be collected,
hashed and so forth. This has given rise to the concept of forensics which
captures a point-in-time picture of a process.
True - CORRECT ANSWER - Ignorance of policy is a legal excuse for an
employee.
field notes - CORRECT ANSWER - A forensics team typically uses two
methods to document a scene as it exists at the time of arrival: photography and
.
Forensics Toolkit (FTK) - CORRECT ANSWER - The forensic tool does
extensive pre-processing of evidence items that recovers deleted files and
extracts e-mail messages.
expectation of privacy - CORRECT ANSWER - A search is constitutional if it
does not violate a person's reasonable or legitimate.
O'Connor v. Ortega - CORRECT ANSWER - The legal decision that
establishes the start point for "warrantless" workplace searches is the Supreme
Court's complex ruling in .
affidavit - CORRECT ANSWER - Many private sector organizations require a
format statement, called a(n) , which provides search authorization and
furnishes much of the same information usually found in a public sector search
warrant.
Root cause analysis - CORRECT ANSWER - is the determination of the
initial flaw or vulnerability that allowed an incident to occur.
, FBI - CORRECT ANSWER - The handles computer crimes that are
categorized as felonies.
bitstream - CORRECT ANSWER - Forensic investigators use copying
when making a forensics image of a device, which reads a sector (or block; 512
bytes on most devices) from the source drive and writes it to the target drive;
this process continues until all sectors on the suspect drive have been copied.
True - CORRECT ANSWER - Within the private sector, the Supreme Court
state, "Every warrantless workplace search must be evaluated carefully on its
facts. In general, however, law enforcement officer can conduct warrantless
search of private (i.e., nongovernment) workplaces only if the officers obtain
the consent of either the employer or another employee with common authority
over the area searched."
eDiscovery - CORRECT ANSWER - is defined as the search for,
collection, and review of items stored in electronic (or, more precisely, digital)
format that are of potential evidentiary value based on criteria specified by a
legal team.
volatility - CORRECT ANSWER - The stability of information over time is
called its .
Evidence seals - CORRECT ANSWER - In evidence handling, specifically
designed are helpful because they are very difficult to remove without
breaking.
lockdown - CORRECT ANSWER - When an incident includes a breach of
physical security, all aspects of physical security should be escalated under a
containment strategy known as .
hybrid - CORRECT ANSWER - A(n) attack is a method of combining
attacks with rootkits and back doors.
