Skip to content

NIST – EP.3 – Quiz

NIST – EP.3 – Quiz

Time limit: 0

Quiz Summary

0 of 8 Questions completed

Questions:

Information

You have already completed the quiz before. Hence you can not start it again.

Quiz is loading…

You must sign in or sign up to start the quiz.

You must first complete the following:

Results

Quiz complete. Results are being recorded.

Results

0 of 8 Questions answered correctly

Your time:

Time has elapsed

You have reached 0 of 0 point(s), (0)

Earned Point(s): 0 of 0, (0)
0 Essay(s) Pending (Possible Point(s): 0)

Categories

Not categorized 0%

Review
Answered
Correct
Incorrect

Question 1 of 8

1. Question

If your organization is prohibited from reviewing and analyzing audit records, what should you do?

Review and analysis should be carried out by a different authorized organization
Correct Incorrect Correct answer

Organizations always have the authority to review and analyze audit records
Correct Incorrect Correct answer

Review and analysis should be carried out by the system through automation to keep the information confidential
Correct Incorrect Correct answer
Question 2 of 8

2. Question

Data mining techniques may be utilized to identify anomalous behavior under which of these controls?

Report generation
Correct Incorrect Correct answer

Record reduction
Correct Incorrect Correct answer

Event logging
Correct Incorrect Correct answer
Question 3 of 8

3. Question

Under which of these controls should personnel choose which system components will log which event types?

Audit record generation
Correct Incorrect Correct answer

Content of audit records
Correct Incorrect Correct answer

Event logging
Correct Incorrect Correct answer
Question 4 of 8

4. Question

What must be done first in the event that audit information is deleted without authorization?

Organization-defined individuals or roles should be alerted
Correct Incorrect Correct answer

The information should be restored
Correct Incorrect Correct answer

The individual who deleted the information should be booted from the system
Correct Incorrect Correct answer
Question 5 of 8

5. Question

What does the protection of audit information control cover?

Technical protection
Correct Incorrect Correct answer

Physical protection
Correct Incorrect Correct answer

Both of the above
Correct Incorrect Correct answer
Question 6 of 8

6. Question

Under which control should your organization define what to do in case of exceeded storage capacity?

Audit log storage capacity
Correct Incorrect Correct answer

Response to audit logging process failures
Correct Incorrect Correct answer

Both of the above
Correct Incorrect Correct answer
Question 7 of 8

7. Question

Which of these is likely to be implemented using digital signatures and digital message receipts?

Audit record generation
Correct Incorrect Correct answer

Audit record retention
Correct Incorrect Correct answer

Non-repudiation
Correct Incorrect Correct answer
Question 8 of 8

8. Question

Which of these controls is mostly concerned with tracking significant behavior such as password changes and failed access?

Event logging
Correct Incorrect Correct answer

Timestamps
Correct Incorrect Correct answer

Protection of audit information
Correct Incorrect Correct answer

Login

Accessing this training requires a login. Please enter your credentials below!

Username or Email Address

Password

Remember Me

Lost Your Password?

Register

Don't have an account? Register one!

Register an Account