Incident response team must adhere to the following:

• A.Assess the situation
• B.Notify appropriate personnel
• C.Stay calm and document everything
• D.All the above

Comment: *

Name: *

Email: *

Verification: *

Incident prioritization must be based on:

• A.All the above
• B.Criticality of affected systems
• C.Potential impact
• D.Current damage

Comment: *

Name: *

Email: *

Verification: *

Keyloggers do NOT:

• A.Run in the background
• B.Alter system files
• C.Send log file to attacker's email or upload it to an ftp server
• D.Secretly records URLs visited in browser, keystrokes, chat conversations, ...etc

Comment: *

Name: *

Email: *

Verification: *

An access control policy authorized a group of users to perform a set of actions on a set of resources. Access to resources is based on necessity and if a particular job role requires the use of those resources. Which of the following is NOT a fundamental element of access control policy

• A.Development group: group of persons who develop the policy
• B.Resource group: resources controlled by the policy
• C.Action group: group of actions performed by the users on resources
• D.Access group: group of users to which the policy applies

Comment: *

Name: *

Email: *

Verification: *

Agencies do NOT report an information security incident is because of:

• A.Afraid of negative publicity
• B.Have full knowledge about how to handle the attack internally
• C.Do not want to pay the additional cost of reporting an incident
• D.All the above

Comment: *

Name: *

Email: *

Verification: *