Question 1

One of the goals of CSIRT is to manage security problems by taking a certain approach towards the customers’ security vulnerabilities and by responding effectively to potential information security incidents. Identify the incident response approach that focuses on developing the infrastructure and security processes before the occurrence or detection of an event or any incident:

Options :

A : Interactive approach

B : Introductive approach

C : Proactive approach

D : Qualitative approach

Answer: C

Question 2

The typical correct sequence of activities used by CSIRT when handling a case is:

Options :

A : Log, inform, maintain contacts, release information, follow up and reporting

B : Log, inform, release information, maintain contacts, follow up and reporting

C : Log, maintain contacts, inform, release information, follow up and reporting

D : Log, maintain contacts, release information, inform, follow up and reporting

Answer: A

Question 3

Incident may be reported using/ by:

Options :

A : Phone call

B : Facsimile (Fax)

C : Email or on-line Web form

D : All the above

Answer: D

Question 4

Incidents such as DDoS that should be handled immediately may be considered as:

Options :

A : Level One incident

B : Level Two incident

C : Level Three incident

D : Level Four incident

Answer: C

Question 5

Spyware tool used to record malicious user’s computer activities and keyboard stokes is called:

Options :

A : adware

B : Keylogger

C : Rootkit

D : Firewall

Answer: B

Higher Test Marks with Free Online 212-89 Exam Practice

Buying Options: