Security Pro v. 8 Module 9

Method to quickly recover & resume work in the event of a primary VM failure or corruption?

How does recording the evidence acquisition process on video help to ensure the cybersecurity evidence has integrity?

Backup that eliminates redundant copies of the same data, which consumes valuable storage resources?

What is a primary function of application clustering in a network?

Tool to gather get emails, memos, invoices, & other e-documents from employees.

What component of a SIEM system can analyze & compare malicious behavior from various sources?

Metadata linked with files and includes information like creation date, access history, and security permissions?

In a multinational company, what will track & monitor data modifications and revert to previous states if necessary?

Snapshot type that ensures the ability to recover files/previous versions of files in case of accidental deletion?

You have detected and identified a security event. What is the first step you should complete?

What is the most important element related to evidence in addition to the evidence itself?

Tool when lawyer needs to parse through data quickly and provide a copy of everything found to the opposing counsel.

Best definition of a security incident?

What is the significance of ensuring the evidence is a true copy of the system state at the time of the breach?

Part of SIEM most critical for monitoring and securing network endpoints, services, and other vulnerable locations?

A network solution that includes an alternate location where operational recovery is provided in minutes of a disaster?

Placed in email's header that provides the originating email account or IP address, and not a spoofed one?

What features enhance your incident-response process and automate as much of it as possible?

A virus deletes traces on HD after executing its operations. What is the most effective way of capturing the evidence?

What is a platform that will compile all your security data generated by different endpoints?

How does a SIEM alert the IT team that a pre-established parameter is not within the acceptable range?

Strategy so the company can dynamically allocate the load based on real-time traffic and server conditions?

Primary function of the Common Address Redundancy Protocol on a network?

Using a syslog message, what component is calculated from the facility and severity level?