CCST Cybersecurity objective 5: Incident Handling

This is the final step of the Cyber Kill Chain, where it is too late to stop the attacker

Which of the following is NOT a step in the Cyber Kill Chain?

This step involves identification and acquisition of potential sources of forensic data:

The four steps of the Digital Forensics process are:

This step involves drawing conclusions from the data:

This step involves preparation and presentation of information resulting from the analysis:

What are the four parts of the Diamond Model of intrusion analysis?

This step is where the threat actor performs research, gathers intelligence, and selects targets

What is the first step in an incident response process?

This step is where the threat actor uses gathered information to develop an attack

The recovery and investigation of information found on digital devices as it relates to criminal activity is known as:

Evidence should be collected from non-volatile memory before it is collected from volatile memory.

This step involves assessment and extraction of relevant information from collected data:

This step is where the threat actor transmits malicious code through an attack vector