CySA 4

During what phase of the IRP would an organization implement defenses designed to reduce the likelihood of an incident?

What phase of the Cyber Kill Chain includes creation of persistent backdoor access for attackers?

Bob wants to adopt an open IoC feed. What issue is Bob most likely to need to address when adopting it?

Which one of the following is not a common source of information that may be correlated with vulnerability scan results?

Which one of the following protocols should never be used on a public network?

Which one of the following elements is not normally found in an incident response policy?

Which one of the following organizations focuses on providing tools and advice for secure web application development?

What approach to vulnerability scanning incorporates information from agents running on the target servers?

Which one of the following values for the CIA CVSS metric would indicate the potential for total compromise of a system?

In what type of attack does the attacker place more information in a memory location than is allocated for that use?

Which one of the following document types would outline the authority of a CSIRT responding to a security incident?

Bob analyzed a vulnerability scan and found that a vulnerability reported did not exist due to recent patch?

What documentation is needed to create and maintain if the evidence is to be used in a legal case?

Which one of the following is an example of a computer security incident?

What federal law requires the use of vulnerability scanning on info systems operated by federal government agencies?

What type of system  can combine log records from multiple sources to detect potential security incidents?

What term describes an organization’s willingness to tolerate risk in their computing environment?

Which one of the CVSS metrics would have info about a type of access that an attacker must have to execute an attack?

Bob is configuring scans for a system that is subject to the PCI DSS standard. What is the minimum frequency required?

Which option would be most useful to determine if traffic levels are not typical for this time of day in a normal week?