Incident Response Theory: Ep.4 – Quiz

____________ is when an organization is no longer able to provide some critical services to its users.

NIST recommends profiling networks and systems to make __________ easier.

 ____________ may include log entries that can reveal the use of a vulnerability scanner.

__________ is an attack vector that uses brute force methods intended to compromise, degrade, or destroy systems, networks, or services.

______________ refers to when sensitive or proprietary information was changed or deleted.

____________ is when time to recovery is unpredictable and the organization needs additional resources and outside help.

It’s important to track comments from incident handlers when ______________ an incident.

A _____________ is an example of an alert-based source of precursors and indicators.

Informing people of an incident is known as incident _____________ .

An example of an ___________ may include antivirus software detecting malware that’s been installed on a system.