FEDVTE Foundations of Incident Management
questions with verified answers
A data model is an agreed upon form that must be filled out to report an
incident:
A. True
B. False Ans✓✓✓B. False
All of the following are steps organizations should take to respond to
incidents with impacts to external actors EXCEPT?
A. Organizations should have supply chain plans-of-action ready for
when and if an incident impacts their supply chain
B. Organizations should create contact information databases in order to
contact external actors identified with a potential impact scenario
C. Organizations should provide supply chain partners with detailed data
on their past and current incident impacts
D. Organizations should put in place agreements detailing requirements
for supply chain partner notification and responsivity Ans✓✓✓C.
Organizations should provide supply chain partners with detailed data on
their past and current incident impacts
Containment strategies may include:
A. Rebuilding systems from original media
,B. Remediating vulnerabilities
C. Leaving systems online
D. Shutting down a service Ans✓✓✓D. Shutting down a service
Data sources to be collected and reviewed during incident analysis might
include:
A. A. DNS and whois records
B. B. Threat feeds
C. C. Application and system logs
D. D. Symptoms reported by users
E. E. A and C only
F. F. B and D only
G. G. None of the above
H. H. All of the above Ans✓✓✓H. H. All of the above
Elements of situational awareness are only technical in nature.
A. True
B. False Ans✓✓✓B. False
Eradication consists of short-term, tactical actions.
, A. True
B. False Ans✓✓✓B. False
Establishing trust is the first step towards creating serious sharing
partnerships:
A. True
B. False Ans✓✓✓A. True
Fusion analysis is most effective when information is unstructured.
A. True
B. False Ans✓✓✓B. False
Fusion is the correlation and analysis of information collected from an
incident report.
A. True
B. False Ans✓✓✓B. False
Having a better response process in place enables a higher level of
operational resilience.
A. True
questions with verified answers
A data model is an agreed upon form that must be filled out to report an
incident:
A. True
B. False Ans✓✓✓B. False
All of the following are steps organizations should take to respond to
incidents with impacts to external actors EXCEPT?
A. Organizations should have supply chain plans-of-action ready for
when and if an incident impacts their supply chain
B. Organizations should create contact information databases in order to
contact external actors identified with a potential impact scenario
C. Organizations should provide supply chain partners with detailed data
on their past and current incident impacts
D. Organizations should put in place agreements detailing requirements
for supply chain partner notification and responsivity Ans✓✓✓C.
Organizations should provide supply chain partners with detailed data on
their past and current incident impacts
Containment strategies may include:
A. Rebuilding systems from original media
,B. Remediating vulnerabilities
C. Leaving systems online
D. Shutting down a service Ans✓✓✓D. Shutting down a service
Data sources to be collected and reviewed during incident analysis might
include:
A. A. DNS and whois records
B. B. Threat feeds
C. C. Application and system logs
D. D. Symptoms reported by users
E. E. A and C only
F. F. B and D only
G. G. None of the above
H. H. All of the above Ans✓✓✓H. H. All of the above
Elements of situational awareness are only technical in nature.
A. True
B. False Ans✓✓✓B. False
Eradication consists of short-term, tactical actions.
, A. True
B. False Ans✓✓✓B. False
Establishing trust is the first step towards creating serious sharing
partnerships:
A. True
B. False Ans✓✓✓A. True
Fusion analysis is most effective when information is unstructured.
A. True
B. False Ans✓✓✓B. False
Fusion is the correlation and analysis of information collected from an
incident report.
A. True
B. False Ans✓✓✓B. False
Having a better response process in place enables a higher level of
operational resilience.
A. True
