4.1 Responding to an incident

Incidents are logged so that lessons can be learnt for the future.

• True

• False

In the event of an incident what 3 points should be addressed?

• Know responsibilities

• Know who to contact

• Know procedures

• Know your enemy

Identify 3 reasons for shutting down the system during an incident.

• Stop intrusion

• Fun

• Flood

• Fire

Who might need to be informed of an incident?

• supervisors

• managers

• specialist companies employed to deal with incidents

• emergency services

Identify 4 ways an incident could be contained.

• isolating whole systems

• changing the passwords of systems administrators if they have been compromised

• closing particular email servers and ports

• sending a round robin

• blocking unauthorised access

Eradication means removing the elements of the incident from the system or network.

• True

• False

The aim of every disaster recovery plan is for it to be regularly implemented.

• True

• False

ISF stands for what?

• International security federation

• International service forum

• International security forum

• Internet security forum

The ISACA aims to reduce the impact of cyber security attacks. What does ISACA stand for?

• Information Service Audit & Control Association

• Information Systems Audio & Control Association

• Information Systems Audit & Control Association

• International Systems Audit & Control Association

Business continuity plans cover getting the business up and running.

• True

• False