md 271-300

In security management, _____ is what authorizes an IT system to process, store, or transmit information. It is issued by a management official and serves as a means of ensuring that systems are of adequate quality.

• Accreditation

• Assurance

• Licensing

• approval

The original purpose of the entire ISO 27000 series was to provide a set of _____ an organization can be certified to. Part of this certification involves an audit to ensure compliance with the standard.

• Policies

• Standards

• Guidelines

• practices

Digital _____ is the use of technical investigation and analysis techniques to identify, collect, preserve, and analyze electronic items of potential evidentiary value so that they may be admitted as evidence in a court of law.

• Analytics

• Semantics

• Catalytics

• Forensics

The two approaches the organization can take regarding investigating events are either “_____” or “_____”.

• Live and let live, fix and forget

• Apprehend and prosecute, catch and release

• Fix and forget, document and refer

• Apprehend and prosecute, fix and forget

Internal investigators must be properly _____ and must follow strict policies and procedures in their investigations.

• Trained

• Briefed

• Advised

• Consulted

The concept known as _____ or chain of evidence means that all items of interest must also be secured in a location the organization can prove has not been accessed by anyone other than authorized individuals.

• Chain or results

• Chain of custody

• Chain of coherence

• Chain of facts

_____ is a challenge to forensics investigators because even if the employee does decide to store their information on organizational equipment, they may download and use free tools preventing the organization from finding out exactly what data is stored.

• Encryption

• Hashing

• USB memory

• Cloud storage

Investigators look for data stored in _____, where data is stored on a drive between files or at the end of the drive space.

• Black space

• Slack space

• Interstadial sectors

• Undercloud areas

_____ refers to tracking specific events that occur on a system and recording them.

• Lagging

• Itemizing

• Logging

• Identifying

In computing, a _____ is a task being performed by a computing system.

• Process

• Program

• Packet

• Frame