stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Duplicate of DFIR - Module 2: Incident Response Preparation Flashcards | StudBud
Explore
/
Duplicate of DFIR - Module 2: Incident Response Preparation
Duplicate of DFIR - Module 2: Incident Response Preparation
14 terms
·
StudBud Administration
·
1 play
Imported from external platform
Flashcards
14 cards
F
Practice quiz
P
Host live
L
Questions
14
Answers
1
Which of these types of Backup Sites is fake?
Warm site
Cold site
Dark site
Hot site
2
Which of these sets of standards are regulations is related to the protection of credit card data
PCI-DSS
SOX
HIPAA
GDPR
3
When preparing for incidents, what is a set of tools a DFIR analyst has prepared for use at a moment's notice called?
Deploy Box
Jump Bag
Crash Pad
Go Bag
4
Which of these sets of standards are regulations is related to protecting the public from financial fraud?
SOX
HIPAA
PCI-DSS
GDPR
5
Which of these sets of standards are regulations is from the EU and relates to PII?
GDPR
HIPAA
SOX
PCI-DSS
6
In addition to the CIA triad, what 2 other principles should be followed? (pick 2)
Accessibility
Non-Repudiation
Authority
Accountability
7
What is the most valuable asset of an organization
Employees
Security
Technology
Intellectual Property
8
Which of these sets of standards are regulations is related to the security of health-related data
SOX
PCI-DSS
HIPAA
GDPR
9
Which of these are organizations that have Incident Response Methodologies (more than 1)
SANS
BWAPP
NIST
OWASP
10
What is a RACI Chart used for?
A guide for who is responsible for what during disaster recovery
Data analysis of projected loss compared to expense of security fix
To create a live list of assets, their value, and risks/vulnerabilities
To organize and monitor who is involved with a procedure and to what degree
11
What does
RACI
stand for?
Really Aggrivating Cybersecurity Initials
Responsible --- Accountable --- Consulted --- Informed
Regulated Infrastructure Control Intervention
Reaction --- Authorization --- Containment --- Investigation
12
What does DRP stand for?
Data Restoration Plan
Diagnostics/Recovery Procedure
Disaster Recovery Plan
DeRP
13
Which is NOT a component of the CIA triad?
Condientiality
Accessibility
Availability
Integrity
14
What is NOT true about assets?
Security plans can only protect physical assets
Have attributes like value, criticality, and involvement in objectives
May be tangible or intangible
They are significant objects, items, and resources used by an organization
