Computer Security Incidents Quiz

Which of the following is NOT a part of the incident response process?

• Quickly identifying an attack

• Minimizing the effects of an attack

• Ignoring the cause of the attack

• Containing damage

What is the focus of the Containment Eradication & Recovery step in the NIST incident response lifecycle?

• Preparing for potential incidents

• Analyzing the incident

• Containing and eradicating the threat, and recovering systems

• Reviewing and learning from the incident

What should be made to prioritize the types of incidents based on organizational impact?

• An IR plan

• A random guess

• A casual conversation

• An unplanned meeting

What should be done on a regular basis to policies and procedures?

• Ignore

• Test/update

• Archive

• Simplify

What is a key component of an AUP related to user identity?

• User registration

• Product pricing

• Market analysis

• Sales targets

What is the first step in the EGI Incident Response Procedure?

• Containment

• Confirmation

• (Suspected) Discovery

• Analysis

What should be done after incident handling is complete?

• Update Procedures and Documentation

• Announce Service Downtime

• Disable Affected Appliances

• Inform Local Security Team

What does IoC stand for in the context of cybersecurity?

• Indicators of Compromise

• Internet of Computers

• Internal Operations Control

• Information of Cybersecurity

What does IDS stand for in cybersecurity?

• Intrusion Detection System

• Internet Data Service

• Internal Data Security

• Information Delivery System

Which of the following could indicate a potential security breach?

• Access to a server from an unusual IP address

• Scheduled maintenance

• Regular email traffic

• Normal file transfers