Skip to content

Incident Response Theory: Ep.7 – Quiz

Incident Response Theory: Ep.7 – Quiz

Time limit: 0

Quiz Summary

0 of 15 Questions completed

Questions:

Information

You have already completed the quiz before. Hence you can not start it again.

Quiz is loading…

You must sign in or sign up to start the quiz.

You must first complete the following:

Results

Quiz complete. Results are being recorded.

Results

0 of 15 Questions answered correctly

Your time:

Time has elapsed

You have reached 0 of 0 point(s), (0)

Earned Point(s): 0 of 0, (0)
0 Essay(s) Pending (Possible Point(s): 0)

Categories

Not categorized 0%

Review
Answered
Correct
Incorrect

Question 1 of 15

1. Question

Which of the following would be unlikely to occur during the preparation phase of the NIST incident response process?

Staff awareness and training
Correct Incorrect Correct answer

Monitoring possible attacker communication channels
Correct Incorrect Correct answer

Installing anti-malware software
Correct Incorrect Correct answer
Question 2 of 15

2. Question

When are you most likely to encounter a vishing threat ?

On the telephone
Correct Incorrect Correct answer

In an email
Correct Incorrect Correct answer

Over text message
Correct Incorrect Correct answer
Question 3 of 15

3. Question

What is an evidence retention policy used to determine?

How long an organization should keep records of an incident
Correct Incorrect Correct answer

How to provide evidence to law enforcement
Correct Incorrect Correct answer

How much user activity should be tracked during an incident
Correct Incorrect Correct answer
Question 4 of 15

4. Question

What is a “false-positive” alert?

A threat was identified, and an alert was triggered
Correct Incorrect Correct answer

A threat was identified, but an alert wasn't triggered
Correct Incorrect Correct answer

No threat was identified, but an alert was triggered
Correct Incorrect Correct answer
Question 5 of 15

5. Question

What is a Central Incident Response Team?

A team that manages other incident response teams
Correct Incorrect Correct answer

Multiple teams that handle specific segments of an organization
Correct Incorrect Correct answer

A team that handles incidents in an organization
Correct Incorrect Correct answer
Question 6 of 15

6. Question

Insider threats are a result of what types of actions performed by an employee?

Malicious actions
Correct Incorrect Correct answer

Accidental actions
Correct Incorrect Correct answer

Both malicious and accidental actions
Correct Incorrect Correct answer
Question 7 of 15

7. Question

The purpose of the recovery phase is to attempt to do what?

Backup the network infrastructure
Correct Incorrect Correct answer

Restore operations to normal
Correct Incorrect Correct answer

Remove the cause of the incident
Correct Incorrect Correct answer
Question 8 of 15

8. Question

During an incident, which of the following groups of people are unlikely to require real-time updates from a CIRT?

Head of Information Security
Correct Incorrect Correct answer

Public Relations
Correct Incorrect Correct answer

Customers
Correct Incorrect Correct answer
Question 9 of 15

9. Question

Which of the following best describes an incident with a high-functional impact?

An organization is no longer able to provide critical services to any user
Correct Incorrect Correct answer

Sensitive information was changed or deleted
Correct Incorrect Correct answer

Time to recovery is unpredicatable
Correct Incorrect Correct answer
Question 10 of 15

10. Question

What is the first stage of the NIST incident response process?

Detection
Correct Incorrect Correct answer

Preparation
Correct Incorrect Correct answer

Containment
Correct Incorrect Correct answer

might
Correct Incorrect Correct answer
Question 11 of 15

11. Question

A sign that an incident is in progress, or is imminent, is known as what?

Warning
Correct Incorrect Correct answer

Indicator
Correct Incorrect Correct answer

Precursor
Correct Incorrect Correct answer
Question 12 of 15

12. Question

When identifying possible precursors and indicators SIEMs, IDSs, and anti-virus software are all examples of what?

Alert-based sources
Correct Incorrect Correct answer

People-based sources
Correct Incorrect Correct answer

Log-based sources
Correct Incorrect Correct answer
Question 13 of 15

13. Question

Identifying the attacking hosts is likely to happen in which phase of the NIST incident response process?

Eradication
Correct Incorrect Correct answer

Containment
Correct Incorrect Correct answer

Detection
Correct Incorrect Correct answer
Question 14 of 15

14. Question

What is a “false-negative” alert?

A threat was identified, but an alert wasn't triggered
Correct Incorrect Correct answer

A threat was identified, and an alert was triggered
Correct Incorrect Correct answer

No threat was identified, but an alert was triggered
Correct Incorrect Correct answer
Question 15 of 15

15. Question

A sign that an incident may occur in the future is known as what?

Precursor
Correct Incorrect Correct answer

Indicator
Correct Incorrect Correct answer

Hint
Correct Incorrect Correct answer

Login

Accessing this training requires a login. Please enter your credentials below!

Username or Email Address

Password

Remember Me

Lost Your Password?

Register

Don't have an account? Register one!

Register an Account