Day 6: Incident Response and Indicators of Malicious Activity

Front

In the context of risk management strategies, which of the following best describes the process of transferring risk? Accepting the risk and preparing for its potential impact, Sharing the risk with another party, such as through insurance, Eliminating the risk entirely by changing business processes, Ignoring the risk and hoping it does not occur

Back

Sharing the risk with another party, such as through insurance

Answer explanation

Transferring risk involves sharing it with another party, such as through insurance. This strategy helps mitigate potential financial losses by distributing the risk rather than bearing it entirely.

Front

When developing an incident response plan, which step is crucial for ensuring the plan's effectiveness? Options: Documenting the plan and storing it in a secure location, Regularly testing and updating the plan based on lessons learned, Assigning a single person to manage all incidents, Keeping the plan confidential from all employees

Back

Regularly testing and updating the plan based on lessons learned

Answer explanation

Regularly testing and updating the plan ensures it remains effective and relevant. This process incorporates lessons learned from past incidents, allowing for continuous improvement and better preparedness for future events.

Front

Which access control model is most suitable for an organization that needs to enforce strict access policies based on job roles? Options: Discretionary Access Control (DAC), Role-Based Access Control (RBAC), Mandatory Access Control (MAC), Attribute-Based Access Control (ABAC)

Back

Role-Based Access Control (RBAC)

Answer explanation

Role-Based Access Control (RBAC) is ideal for enforcing strict access policies based on job roles, as it assigns permissions according to the roles users hold within the organization, ensuring appropriate access levels.

Front

In the development of security policies, what is the primary reason for involving stakeholders from various departments?

Back

To gather diverse perspectives and ensure policy applicability

Answer explanation

Involving stakeholders from various departments helps gather diverse perspectives, ensuring the security policy is relevant and applicable across the organization, rather than being overly technical or lengthy.

Front

Which network security protocol is designed to provide secure communication over a computer network and is widely used for secure web browsing?

Back

SSL/TLS

Answer explanation

SSL/TLS is the protocol specifically designed to secure communications over a network, making it essential for secure web browsing. Unlike FTP, HTTP, and SMTP, SSL/TLS encrypts data to protect it during transmission.

Front

When considering data protection techniques, which method involves transforming data into a secure format that is unreadable without a decryption key?

Back

Encryption

Answer explanation

Encryption is the method that transforms data into a secure format, making it unreadable without a decryption key. This ensures that only authorized users can access the original data, distinguishing it from other techniques like data masking or tokenization.

Front

How can an organization effectively prioritize risks identified during a risk assessment process?

Back

By evaluating the potential impact and likelihood of each risk

Answer explanation

The correct approach to prioritize risks is by evaluating their potential impact and likelihood. This ensures that the organization focuses on the most significant risks, rather than just those that are easier to address or have occurred previously.

Front

In incident response planning, why is it important to have a communication plan in place?

Back

To provide clear instructions to stakeholders during an incident

Answer explanation

A communication plan is crucial in incident response as it provides clear instructions to stakeholders, ensuring everyone understands their roles and responsibilities during an incident, which helps in effective management and resolution.

Front

Which access control model allows access decisions to be based on a combination of user attributes, resource attributes, and environmental conditions?

Back

Attribute-Based Access Control (ABAC)

Answer explanation

Attribute-Based Access Control (ABAC) allows access decisions based on user attributes, resource attributes, and environmental conditions, making it the most flexible model compared to DAC, RBAC, and MAC.

Front

What is the primary goal of developing security policies within an organization?

Back

To establish a framework for consistent security practices

Answer explanation

The primary goal of developing security policies is to establish a framework for consistent security practices, ensuring that all employees understand their roles in maintaining security and protecting sensitive information.