Free EMC D-CSF-SC-23 Exam Dumps Questions & Answers

What must be included in the CMDB?

• A.  Software End User Licensing Agreements
• B.  Dependencies of installed components
• C.  Inventory of uninstalled software
• D.  Known vulnerabilities of installed software

What procedure is designed to enable security personnel to detect, analyze, contain, eradicate, respond, and recover from malicious computer incidents such as unauthorized changes to system hardware, software, or data?

• A.  Emergency Analysis Plan
• B.  Disaster Recovery Plan
• C.  Crisis Communication Plan
• D.  Incident Response Plan

What does a security benchmark help define?

• A.  Which step of the DRP to execute first
• B.  Whether or not the organization should implement ISCM
• C.  The Baseline, or "as is" state
• D.  What parts of the Baseline are appropriate

When should event analysis be performed?

• A.  Only when requested by an auditor
• B.  Only at the discretion of an authorized security analyst
• C.  Routinely for all events collected on a mission critical system
• D.  After an event is triggered by the detection system

Your firewall blocked several machines on your network from connecting to a malicious IP address.
After reviewing the logs, the CSIRT discovers all Microsoft Windows machines on the network have been affected based on a newly published CVE. Based on the IRP, what should be done immediately?

• A.  Contain the breach
• B.  Revise the IRP
• C.  Update the asset inventory
• D.  Eradicate the breach