#02 Incident Response, BC, and DR Concepts

You are working in your organization's security office. You receive a call from a user who has tried to log in to the network several times with the correct credentials, with no success. This is an example of a(n)_______. (D2, L2.1.1)

• emergency

• event

• policy

• disaster

You are working in your organization's security office. You receive a call from a user who has tried to log in to the network several times with the correct credentials, with no success. After a brief investigation, you determine that the user's account has been compromised. This is an example of a(n)_______. (D2, L2.1.1)

• risk management

• incident detection

• malware

• disaster

An external entity has tried to gain access to your organization's IT environment without proper authorization. This is an example of a(n) _________. (D2, L2.1.1)

• exploit

• intrusion

• event

• malware

When responding to a security incident, your team determines that the vulnerability that was exploited was not widely known to the security community, and that there are no currently known definitions/listings in common vulnerability databases or collections. This vulnerability and exploit might be called ______. (D2, L 2.1.1)

• malware

• critical

• fractal

• zero-day

True or False? The IT department is responsible for creating the organization's business continuity plan. (D2, L2.2.1)

• True

• False

The Business Continuity effort for an organization is a way to ensure critical ______ functions are maintained during a disaster, emergency, or interruption to the production environment. (D2, L 2.2.1)

• business

• technical

• IT

• financial

Which of the following is very likely to be used in a disaster recovery (DR) effort? (D2, L 2.3.1)

• guard dogs

• data backups

• contract personnel

• anti-malware solutions

Which of the following is often associated with DR planning? (D2, L 2.3.1)

• checklists

• firewalls

• motion detectors

• non-repudiation

Which of these activities is often associated with DR efforts? (D2, L2.3.1)

• employees returning to the primary production location

• running anti-malware solutions

• scanning the IT environment for vulnerabilities

• zero-day exploits

Which of these components is very likely to be instrumental to any disaster recovery (DR) effort? (D2, L2.3.1)

• routers

• laptops

• firewalls

• backups