Question 1
1 out of 1 points
A CSIRT model that is effective for large organizations and for organizations with major computing resources at distant locations is the ____.
Selected Answer:
Correct distributed CSIRT
Correct Answer:
Correct distributed CSIRT
Question 2
0 out of 1 points
The first group to communicate the CSIRT’s vision and operational plan is the managerial team or individual serving as the ____.
Selected Answer:
Incorrect technical lead
Correct Answer:
Correct champion
Question 3
1 out of 1 points
Those services performed in response to a request or a defined event such as a help desk alert are called ____.
Selected Answer:
Correct reactive services
Correct Answer:
Correct reactive services
Question 4
1 out of 1 points
One way to build and maintain staff skills is to develop incident-handling ____ and have the team members discuss how they would handle them.
Selected Answer:
Correct scenarios
Correct Answer:
Correct scenarios
Question 5
1 out of 1 points
Giving the IR team the responsibility for ____ is generally not recommended.
Selected Answer:
Correct patch management
Correct Answer:
Correct patch management
Question 6
1 out of 1 points
When an organization completely outsources its IR work, typically to an on-site contractor, it is called a(n) ____ model.
Selected Answer:
Correct fully outsourced
Correct Answer:
Correct fully outsourced
Question 7
1 out of 1 points
The focus during a(n) ____ is on learning what worked, what didn’t, and where communications and response procedures may have failed.
Selected Answer:
Correct after action review
Correct Answer:
Correct after action review
Question 8
0 out of 1 points
Those services undertaken to prepare the organization or the CSIRT constituents to protect and secure systems in anticipation of problems, attacks, or other events are called ____.
Selected Answer:
Incorrect reactive services
Correct Answer:
Correct proactive...