1. Which of the following is the MOST important outcome of testing incident response plans?
A) Internal procedures are improved. B) An action plan is available for senior management. C) Staff is educated about current threats. D) Areas requiring investment are identified.
2. What should be the MAIN goal of an organization's incident response plan?
A) Keep stakeholders notified of incident status. B) Enable appropriate response according to criticality. C) Correlate incidents from different systems. D) Identify the root cause of the incident.
3. An organization has purchased a security information and event management (SIEM) tool. Which of the following would be MOST important to consider before implementation?
A) The contract with the SIEM vendor B) Controls to be monitored C) Available technical support D) Reporting capabilities
4. A client/server configuration will:
A) optimize system performance by having a server on a front-end and clients on a host B) enhance system performance through the separation of front-end and back-end processes C) keep track of all the clients using the IS facilities of a service organization D) limit the clients and servers' relationship by limiting the IS facilities to a single hardware system
5. Which of the following would BEST ensure the confidentiality of sensitive data during transmission?
A) Restricting the recipient through destination IP addresses B) Sending data over public networks using Secure Sockets Layer (SSL) C) Password protecting data over virtual local area networks (VLAN) D) Sending data through proxy servers
Leave a comment