EASTTOM_CH07-Digital Forensics, Investigation,
and Response 4E Open questions with verified and
answers
__________ is a common method for scoring system vulnerabilities.
Ans✓✓✓Common Vulnerability Scoring System (CVSS)
A ________ is a plan for returning the business to full normal
operations. Ans✓✓✓disaster recovery plan (DRP)
A business impact analysis indicates an organization cannot operate
without its web server for more than 5 days and still recover. The mean
time to repair is 3 days. How many days do you have after a disaster to
initiate repairs or the organization will not be able to recover?
Ans✓✓✓2
A common approach for manually managed backups is the Grandfather-
Father-Son scheme. Consider a server using traditional tape backup that
is backed up daily. At the end of the week, a weekly backup is made. At
the end of the month, there is a monthly backup made. Which of the
following is not true of the Grandfather-Father-Son scheme?
Ans✓✓✓Weekly backups are not reused, only sons and grandfathers.
A forensic expert sometimes uses specific measurements to describe an
incident in order to analyze it. Which of the following is helpful in
tracing the root cause of an incident and involves depiction of something
resembling a fish head and fish bones? Ans✓✓✓Ishikawa diagram
, Company AtoZ hosts an e-commerce server with a large hard drive. The
manufacturer claims the drive is guaranteed to perform properly for
100,000 hours. What is this measure most closely related to?
Ans✓✓✓Mean time to failure (MTTF)
In a business impact analysis, which of the following best describes the
recovery time objective (RTO)? Ans✓✓✓The target time to have a
down system back up and running
In a business impact analysis, which of the following refers to how much
data will be lost in a computer disaster? Ans✓✓✓RPO
Jennifer sends a threatening email to Rachel, a classmate, to bully her.
What type of computer security incident is being described?
Ans✓✓✓Inappropriate usage
Many different kinds of computer disasters can disrupt normal
operations for an organization's systems. What type of disaster is most
likely to require a computer forensic expert? Ans✓✓✓Intrusion
Miriam is a forensic investigator. She assisted in an investigation of a
computer incident for a company that processes payment card
information. She is writing the report on the breach and has been
informed that all companies that process payment card data must issue a
report if a breach violates which of the following? Ans✓✓✓PCI DSS
and Response 4E Open questions with verified and
answers
__________ is a common method for scoring system vulnerabilities.
Ans✓✓✓Common Vulnerability Scoring System (CVSS)
A ________ is a plan for returning the business to full normal
operations. Ans✓✓✓disaster recovery plan (DRP)
A business impact analysis indicates an organization cannot operate
without its web server for more than 5 days and still recover. The mean
time to repair is 3 days. How many days do you have after a disaster to
initiate repairs or the organization will not be able to recover?
Ans✓✓✓2
A common approach for manually managed backups is the Grandfather-
Father-Son scheme. Consider a server using traditional tape backup that
is backed up daily. At the end of the week, a weekly backup is made. At
the end of the month, there is a monthly backup made. Which of the
following is not true of the Grandfather-Father-Son scheme?
Ans✓✓✓Weekly backups are not reused, only sons and grandfathers.
A forensic expert sometimes uses specific measurements to describe an
incident in order to analyze it. Which of the following is helpful in
tracing the root cause of an incident and involves depiction of something
resembling a fish head and fish bones? Ans✓✓✓Ishikawa diagram
, Company AtoZ hosts an e-commerce server with a large hard drive. The
manufacturer claims the drive is guaranteed to perform properly for
100,000 hours. What is this measure most closely related to?
Ans✓✓✓Mean time to failure (MTTF)
In a business impact analysis, which of the following best describes the
recovery time objective (RTO)? Ans✓✓✓The target time to have a
down system back up and running
In a business impact analysis, which of the following refers to how much
data will be lost in a computer disaster? Ans✓✓✓RPO
Jennifer sends a threatening email to Rachel, a classmate, to bully her.
What type of computer security incident is being described?
Ans✓✓✓Inappropriate usage
Many different kinds of computer disasters can disrupt normal
operations for an organization's systems. What type of disaster is most
likely to require a computer forensic expert? Ans✓✓✓Intrusion
Miriam is a forensic investigator. She assisted in an investigation of a
computer incident for a company that processes payment card
information. She is writing the report on the breach and has been
informed that all companies that process payment card data must issue a
report if a breach violates which of the following? Ans✓✓✓PCI DSS
