What are some incident response tools?

IDS, SIEM, Proxies and Gateways, Vulnerability Scanners

What does BCDR stand for?

Business Continuity Disaster Recovery

studbud

CySA Day 8

25 termsStudBud Administration48 plays

Test your knowledge on essential concepts and practices in the field of cybersecurity

Flashcards25 cardsFPractice quizPHost liveL

Questions 25

Answers

1
What does eradication involve?
Removing root cause
Training staff
Restoring services
Documenting incidents
2
______ Defines an incident as "The act of violating an explicit or implied security policy."
CVSS
Mitre Attack
PCI DSS
NIST
3
What does BCP stand for?
Business Continuity Planning
Business Crisis Plan
Business Compliance Policy
Business Control Plan
4
What does CVSS assess?
Vulnerability severity
User satisfaction
Data accuracy
Network speed
5
What does DLP protect?
Data accuracy
Network speed
Sensitive data
User satisfaction
6
What are some incident response tools?
IDS
SIEM
Proxies and Gateways
Vulnerability Scanners
7
What does RCA stand for?
Root Cause Analysis
Risk Control Assessment
Response Control Action
Rapid Change Assessment
8
How are incidents classified?
By location
By type only
By time of occurrence
By severity and impact
9
Which stage follows reconnaissance in the Cyber Kill Chain?
Exploitation
Installation
Weaponization
Delivery
10
What is the focus of post-incident review?
Preparing for future incidents
Training new staff
Identifying lessons learned
Updating policies
11
What is the purpose of forensic analysis?
Monitoring systems
Understanding incidents
Collecting user data
Training staff
12
What does EDR monitor?
Network speed
Endpoint threats
User satisfaction
Data accuracy
13
Which framework provides a matrix of adversary tactics?
COBIT
ISO 27001
MITRE ATT&CK
NIST
14
What is the focus of threat hunting?
User management
Reactive response
Data encryption
Proactive search
15
What is the goal of containment strategies?
To eradicate threats
To analyze incidents
To recover systems
To limit impact
16
What plays a critical role in monitoring for IoCs?
Containers
PCI DSS
Metal Detectors
SIEM
17
What are APTs known for?
Immediate impact
Long-term objectives
Short-term attacks
Visible actions
18
What does BIA stand for?
Backup Integration Architecture
Basic Information Assessment
Business Intelligence Application
Business Impact Analysis
19
Who is responsible for managing incidents?
Management
External Consultants
IT Department
Incident Response Team
20
What is the last step of the Incident Response Life Cycle?
Eradication and Recovery
Containment
Preparation
Post-incident Activity
21
What is a Business Continuity Plan (BCP)?
A documented strategy
A financial report
A hiring guide
A marketing plan
22
What does BCDR stand for?
Business Class Disaster Reporting
Businesses Can't Drop Records
Business Continuity Disaster Recovery
Business Continuity Disaster Reporting
23
What are tabletop exercises?
Simulated scenarios
Training sessions
Real incident responses
Policy reviews
24
What is the first step in Incident Response?
Eradication and Recovery
Containment
Preparation
Detection and Analysis
25
What are the first things you should identify in incident response?
SLA
CVEs
MOU
IoCs

CySA Day 8 Flashcards | StudBud