CYBR 4330 - Chapter 4 | UPDATED Questions with 100%
Verified Answers
Q1: Contingency planning
A: addresses everything done by an organization to prepare for an unexpected incident
Q2: incident response (IR)
A: focused on detecting and evaluating the severity of emerging unexpected events
One of the core elements of CP
process should attempt to contain and resolve incidents according to the incident
response plan (IR plan).
When incidents arise that cannot be contained or resolved, other elements of the CP
process are activated using the documented escalation processes noted throughout the
plan
==
a set of procedures that commence when an incident is detected
must be carefully planned and coordinated
Q3: •preparation;
•detection and analysis;
•containment, eradication, and recovery; and
post-incident activity
A: The overall IR process is made up of four phases
Q4: CPMT transfers info gleaned to other sub committees
A: What happens after CPMT completed BIA?
Q5: IR, DR, BC committees get overlapping info on attacks they
could face, prioritization, and attack scenario end cases
A:
Q6: Each gets as much info as CPMT overall
A:
Q7: 1.Form the incident response planning team (IRPT).
2.Develop the IR policy.
3.Integrate the BIA in the incident response mission.
4.Identify preventive controls.
5.Organize the computer security incident response team
(CSIRT).
6.Create IR strategies and procedures.
7.Develop the IR plan.
8.Ensure plan testing, training, and exercises.
, 9.Ensure plan maintenance.
A: •In the case of IR planning, the CPMT follows these general stages
Q8: IR team
A: Organizing the IRP process begins with the
responsible for development and administration of the IR plan, as well as development
and training of the CSIRT
needs to be organized as a separate entity
begins by identifying and engaging a collection of stakeholders
Q9: stakeholders
A: representative collection of individuals with a stake int he successful and uninterrupted
operation of the org's info infra
used to collect vital info on the roles and responsibilities of the CSIRT
Q10: ==COMMS of INTEREST==
•General management
understand what CSIRT is and does
preauthrozies interaction between CSIRT and key business
functions
A: Typical stakeholders often include (134-5)
Q11: •IT management
understand CSIRT's demands
" resourcs and access they will require
approve CSIRT actions
A:
Q12: •InfoSec management
understand on-hand requirements of the CSIRT
A:
Q13: ==ORGANIZATIONAL DEPTS==
•The legal department
review procedures of CSIRT
understand steps they perform to ensure it's in legal
guidelines
guidance on contracts and S:Ss
A:
Q14: •The human resources department (HR)
acquire personnel not on hand to complete team
Verified Answers
Q1: Contingency planning
A: addresses everything done by an organization to prepare for an unexpected incident
Q2: incident response (IR)
A: focused on detecting and evaluating the severity of emerging unexpected events
One of the core elements of CP
process should attempt to contain and resolve incidents according to the incident
response plan (IR plan).
When incidents arise that cannot be contained or resolved, other elements of the CP
process are activated using the documented escalation processes noted throughout the
plan
==
a set of procedures that commence when an incident is detected
must be carefully planned and coordinated
Q3: •preparation;
•detection and analysis;
•containment, eradication, and recovery; and
post-incident activity
A: The overall IR process is made up of four phases
Q4: CPMT transfers info gleaned to other sub committees
A: What happens after CPMT completed BIA?
Q5: IR, DR, BC committees get overlapping info on attacks they
could face, prioritization, and attack scenario end cases
A:
Q6: Each gets as much info as CPMT overall
A:
Q7: 1.Form the incident response planning team (IRPT).
2.Develop the IR policy.
3.Integrate the BIA in the incident response mission.
4.Identify preventive controls.
5.Organize the computer security incident response team
(CSIRT).
6.Create IR strategies and procedures.
7.Develop the IR plan.
8.Ensure plan testing, training, and exercises.
, 9.Ensure plan maintenance.
A: •In the case of IR planning, the CPMT follows these general stages
Q8: IR team
A: Organizing the IRP process begins with the
responsible for development and administration of the IR plan, as well as development
and training of the CSIRT
needs to be organized as a separate entity
begins by identifying and engaging a collection of stakeholders
Q9: stakeholders
A: representative collection of individuals with a stake int he successful and uninterrupted
operation of the org's info infra
used to collect vital info on the roles and responsibilities of the CSIRT
Q10: ==COMMS of INTEREST==
•General management
understand what CSIRT is and does
preauthrozies interaction between CSIRT and key business
functions
A: Typical stakeholders often include (134-5)
Q11: •IT management
understand CSIRT's demands
" resourcs and access they will require
approve CSIRT actions
A:
Q12: •InfoSec management
understand on-hand requirements of the CSIRT
A:
Q13: ==ORGANIZATIONAL DEPTS==
•The legal department
review procedures of CSIRT
understand steps they perform to ensure it's in legal
guidelines
guidance on contracts and S:Ss
A:
Q14: •The human resources department (HR)
acquire personnel not on hand to complete team
