ISC2 - CC - Chapter 2 - Module 1

You are reviewing log data from a router; there is an entry that shows a user sent traffic through the router at 11:45 am, local time, yesterday. This is an example of a(n) _______?

• Incident
• Event
• Attack
• Threat

You are working in your organization's security office. You receive a call from a user who has tried to log in to the network several times with the correct credentials, with no success. After a brief investigation, you determine that the user's account has been compromised. This is an example of a(n)_______?

• Risk management
• Incident detection
• Malware
• Disaster

An external entity has tried to gain access to your organization's IT environment without proper authorization. This is an example of a(n) _________?

• Exploit
• Intrusion
• Event
• Malware

Which of these is an example of a privacy breach?

• Unavailability of critical systems
• Access of private information by an unauthorized person
• Any observable occurrence in a network or system
• Being exposed to the possibility of attack

When responding to a security incident, your team determines that the vulnerability that was exploited was not widely known to the security community, and that there are no currently known definitions/listings in common vulnerability databases or collections. This vulnerability and exploit might be called ______?

• Malware
• Critical
• Intrusion
• Zero-day

What type of documentation exists for zero-day vulnerabilities?

• CVSS
• APT
• CVE
• None

What is an Incident?

• A potentially dangerous event
• A new malware
• Any event
• A dangerous exploit

What are the goals of Incident Response?

• Reduce the impact, restore operations and prevent similar incidents
• Prevent Incidents from happening
• Attack Incidents before they become problems
• Delete malware as fast as possible

What is an incident response plan?

• A plan for responding to workplace accidents.
• A plan for responding to security incidents.
• A plan for responding to medical emergencies.
• A plan for responding to natural disasters.

What is the purpose of an incident response plan (IRP)?

• Minimize the impact of incidents
• Prevent incidents from occurring
• Keep business operating
• All the other answers are correct