CYBR 4330(ADVANCED CYBERSECURITY OPERATIONS AND
DEFENSE) TEST 2 | QUESTIONS AND ANSWERS | VERIFIED AND
WELL DETAILED ANSWERS | LATEST EXAM UPDATE
hot site - CORRECT ANSWER - A resumption location known as a ___ is a
fully configured computer facility capable of establishing operations at a
moment's notice.
NIST - CORRECT ANSWER - ___ is a valuable resource for additional
information on building and staffing CSIRTs
Disaster Recovery Plan - CORRECT ANSWER - A ___ deals with the
preparation for and recovery from a disaster whether natural or man-made.
Business Impact Analysis - CORRECT ANSWER - The ___ is an
investigation and assessment of the impact that carious events or incidents can
have on the organization.
Recovery Point Objective - CORRECT ANSWER - The ___ is the point in
time by which systems and data must be recovered after an outage as
determined by the business unit.
write blocker - CORRECT ANSWER - Because it is possible for investigators
to confuse the suspect and destination disks when performing imaging, and to
preclude any grounds for challenging the image output, it is common practice to
protect the suspect media using a ___.
False - CORRECT ANSWER - Laws governing search and seizure in the
public sector are much more straightforward than those in the private sectors.
, snapshot - CORRECT ANSWER - A continuously changing process present
challenges in acquisition, as there is not a fixed state that can be collected,
hashed and so forth. This has given rise to the concept of ___ forensics which
captures a point-in-time picture of a process.
True - CORRECT ANSWER - Ignorance of policy is a legal excuse for an
employee.
field notes - CORRECT ANSWER - A forensics team typically uses two
methods to document a scene as it exists at the time of arrival: photography and
___.
Forensics Toolkit (FTK) - CORRECT ANSWER - The forensic tool ___ does
extensive pre-processing of evidence items that recovers deleted files and
extracts e-mail messages.
expectation of privacy - CORRECT ANSWER - A search is constitutional if it
does not violate a person's reasonable or legitimate.
O'Connor v. Ortega - CORRECT ANSWER - The legal decision that
establishes the start point for "warrantless" workplace searches is the Supreme
Court's complex ruling in ___.
affidavit - CORRECT ANSWER - Many private sector organizations require a
format statement, called a(n) ___, which provides search authorization and
furnishes much of the same information usually found in a public sector search
warrant.
Root cause analysis - CORRECT ANSWER - ___ is the determination of the
initial flaw or vulnerability that allowed an incident to occur.
DEFENSE) TEST 2 | QUESTIONS AND ANSWERS | VERIFIED AND
WELL DETAILED ANSWERS | LATEST EXAM UPDATE
hot site - CORRECT ANSWER - A resumption location known as a ___ is a
fully configured computer facility capable of establishing operations at a
moment's notice.
NIST - CORRECT ANSWER - ___ is a valuable resource for additional
information on building and staffing CSIRTs
Disaster Recovery Plan - CORRECT ANSWER - A ___ deals with the
preparation for and recovery from a disaster whether natural or man-made.
Business Impact Analysis - CORRECT ANSWER - The ___ is an
investigation and assessment of the impact that carious events or incidents can
have on the organization.
Recovery Point Objective - CORRECT ANSWER - The ___ is the point in
time by which systems and data must be recovered after an outage as
determined by the business unit.
write blocker - CORRECT ANSWER - Because it is possible for investigators
to confuse the suspect and destination disks when performing imaging, and to
preclude any grounds for challenging the image output, it is common practice to
protect the suspect media using a ___.
False - CORRECT ANSWER - Laws governing search and seizure in the
public sector are much more straightforward than those in the private sectors.
, snapshot - CORRECT ANSWER - A continuously changing process present
challenges in acquisition, as there is not a fixed state that can be collected,
hashed and so forth. This has given rise to the concept of ___ forensics which
captures a point-in-time picture of a process.
True - CORRECT ANSWER - Ignorance of policy is a legal excuse for an
employee.
field notes - CORRECT ANSWER - A forensics team typically uses two
methods to document a scene as it exists at the time of arrival: photography and
___.
Forensics Toolkit (FTK) - CORRECT ANSWER - The forensic tool ___ does
extensive pre-processing of evidence items that recovers deleted files and
extracts e-mail messages.
expectation of privacy - CORRECT ANSWER - A search is constitutional if it
does not violate a person's reasonable or legitimate.
O'Connor v. Ortega - CORRECT ANSWER - The legal decision that
establishes the start point for "warrantless" workplace searches is the Supreme
Court's complex ruling in ___.
affidavit - CORRECT ANSWER - Many private sector organizations require a
format statement, called a(n) ___, which provides search authorization and
furnishes much of the same information usually found in a public sector search
warrant.
Root cause analysis - CORRECT ANSWER - ___ is the determination of the
initial flaw or vulnerability that allowed an incident to occur.
