The incident management team is mostly:

Diverse group of people representing relevant disciplines.

What is the aim of the incident monitoring process?

identify potential harmful events

Disposal involves deployment of processes to:

Ensure against magnetic remanence

Operations and Maintenance are lumped together into sustainment because:

They are major activities of the SW use lifecycle period.

People who do operational reviews should NOT:

be called upon as soon as an incident occurs.

Members of an incident response team are:

trained to deal w/ events rather than those who report them., are like the fire department, given special training to ensure best solution to a problem.

Strictly speaking, when does the operations process begin?

After the product is released from development

The useful lifecycle describes:

The lifecycle of a product after release.

Which publication places Operations and Maintenance into the single category of "sustainment"?

DHS C. Body of Knowl. to Produce,Sustain,Acquire Secure SW.

A retention cycle is defined as:

a complete set of backups needed to restore data.

studbud

Secure SW Operations & Maintenance

21 termsStudBud Administration14 plays

Chapter 19 CSSLP

Flashcards21 cardsFPractice quizPHost liveL

Questions 21

Answers

1
It's important to test the changed product:
prior to reintegration
after use
prior to acceptance
within its environment
2
The incident management team is mostly:
Strictly composed of managers
Diverse group of people representing relevant disciplines.
Strictly technical personnel.
Composed of best programmers & designers.
3
What is the aim of the incident monitoring process?
identify potential harmful events
prevent malicious exploits of software
prevent change management mistakes
provide standards for secure development
4
Disposal involves deployment of processes to:
Ensure effective remanence
Create magnetic remanence
Ensure against magnetic remanence
Ensure magnetic remanence
5
Which step is often overlooked in the protection of archives?
Encryption
Hashing
Disposal
Versioning
6
Operations and Maintenance are lumped together into sustainment because:
They are neither development nor acquisition.
They are control processes for sustaining assurance.
They are major activities of the SW use lifecycle period.
They both occur at the end of the lifecycle
7
Operations Involve:
Assuring Personnel
Ensuring proper design
Receiving change requests
Performing tests and reviews
8
Which plan is used to ensure an efficient transition of SW into retirement?
Incident Response Plan
Change Management Plan
Software Disposal Plan
Incident Response Plan
9
People who do operational reviews should NOT:
be allowed to inspect development plans
be allowed to inspect maintenance plans
participate in code inspections
be called upon as soon as an incident occurs.
10
Disposal must always closely coordinate with:
System Development
System Stakeholders
Managers of the testing and review process.
The documentation process
11
Part of customer service is
ensuring adequate resources
developing new code
receiving change requests
assuring personnel
12
Extra Credit: How much money did the creators of WannaCry make from the initial attack?
$206,900
$26,090
$16,190
$26,190
13
Members of an incident response team are:
trained to deal w/ events rather than those who report them.
report to the customer service manager
are like the fire department
given special training to ensure best solution to a problem.
14
Patching can be labeled as any of the following, except:
patches
hot-fixes
quick fix engineering
enhancement
15
Strictly speaking, when does the operations process begin?
After product release
During customer acceptance testing
During the development lifecycle
After the product is released from development
16
Which is one of the cornerstones of a security program?
Backups
Customer Support
Monitoring
Maintenance
17
Decisions about requested changes are made based on their potential:
impact and likelihood
Project Management features
efficiency and effectiveness
validation and verification process
18
Incidents can be:
Passive
Major Changes
Positive or Negative
Active or Potential
19
The useful lifecycle describes:
The lifecycle of a product after release.
The time it takes to develop a useful system.
The process of deciding whether a system is useful.
The actual timing requirements for release.
20
Which publication places Operations and Maintenance into the single category of "sustainment"?
Payment Card Industry Data Security Standards (PCI DSS)
ISO 12207:1995 Standard
DHS C. Body of Knowl. to Produce,Sustain,Acquire Secure SW.
Intl. Information System Security Certification Consortium
21
A retention cycle is defined as:
the amount of time needed to retain data.
the stage where developers check in their code.
a complete set of backups needed to restore data.
stage in SW operations where code is backed up for later use

Secure SW Operations & Maintenance Flashcards | StudBud