Question 1

Organizations should have a carefully planned and fully populated inventory of all their network devices, communication channels, and computing devices. _________________________

Accepted Answer

Having a complete inventory of all network devices, communication channels, and computing devices helps organizations better manage their network infrastructure and identify potential vulnerabilities or security risks. This information is critical for effective network monitoring and incident response.

Question 2

The simplest part of an investigation is analyzing a copy or image for potential evidentiary material. __________

Accepted Answer

most complex

Question 3

The internal vulnerability assessment is usually performed against every device that is exposed to the Internet, using every possible penetration testing approach. _________________________

Accepted Answer

Internet

Question 4

The CISO uses the results of maintenance activities and the review of the information security program to determine if the status quo can adequately meet the threats at hand. _________________________

Accepted Answer

The CISO regularly evaluates the information security program and compares it to the current threats to determine if updates or changes are necessary. If the maintenance activities and review indicate that the current status quo can adequately meet the threats, no changes are needed. Therefore, the statement is true.

Question 5

A(n) war game puts a subset of plans in place to create a realistic test environment. _________________________

Accepted Answer

A war game typically involves setting up a simulation or scenario that tests a subset of plans in order to create a realistic test environment. This allows military strategists and planners to evaluate different options and outcomes in a safe and controlled setting before implementing them in real-world situations.

Question 6

A chain of custody is the detailed documentation of the collection, storage, transfer, and ownership of evidence from the crime scene through its presentation in court. ___________

Accepted Answer

This statement is true. Chain of custody is important to ensure the integrity and admissibility of evidence in court. It tracks who has had control of the evidence at all times to avoid tampering or contamination.

Question 7

An example of the type of vulnerability exposed via traffic analysis occurs when an organization is trying to determine if all its device signatures have been adequately masked. _________________________

Accepted Answer

Traffic analysis can reveal patterns that expose vulnerabilities in an organization's security, such as whether device signatures have been masked or not.

Question 8

To be put to the most effective use, the information that comes from the IDPS must be integrated into the inventory process. _________________________

Accepted Answer

maintenance

Question 9

The best method of remediation in most cases is to repair a vulnerability. _________________________

Accepted Answer

Repairing a vulnerability addresses the root cause of a potential security incident or breach, reducing the risk of future attacks or exploitation. Other methods of remediation, such as implementing compensating controls, may mitigate the impact of a vulnerability but do not eliminate it entirely.

Question 10

A(n) __________ item is a hardware or software item that is to be modified and revised throughout its life cycle.
A)revision
B)update
C)change
D)configuration

Accepted Answer

A configuration item (CI) is a hardware or software item that is intended to be managed throughout its life cycle. This includes modification and revision as necessary to ensure that the item continues to meet its specified requirements and functions effectively within its environment. CIs are typically subject to configuration management processes that ensure that all changes are documented, tracked, and approved, and that the current configuration of each item is known and controlled.

Question 11

You can document the results of the verification of a vulnerability by saving the results in what is called a(n) profile. _________________________

Accepted Answer

trophy

Question 12

__________ are a component of the security triple.
A)Threats
B)Assets
C)Vulnerabilities
D)All of the above

Accepted Answer

The security triple includes three components, namely threats, assets, and vulnerabilities. Threats refer to entities or events that could cause harm to assets or exploit vulnerabilities. Assets are resources that need to be protected, such as information, equipment, or facilities. Vulnerabilities are weaknesses or flaws in a security system that could be exploited by threats to harm assets. Therefore, all the options mentioned (A: Threats, B: Assets, C: Vulnerabilities) are correct components of the security triple.

Question 13

A __________ is the recorded condition of a particular revision of a software or hardware configuration item.
A)state
B)version
C)configuration
D)baseline

Accepted Answer

The answer of A __________ is the recorded condition of...

Question 14

The final process in the vulnerability assessment and remediation domain is the exit phase. _________________________

Accepted Answer

remediation

Question 15

An affidavit is used as permission to search for evidentiary material at a specified location and/or to seize items to return to an investigator's lab for examination after being signed by an approving authority. _____________

Accepted Answer

search warrant, warrant

Question 16

When possible, major incident response plan elements should be rehearsed. _________________________

Accepted Answer

Rehearsing major incident response plan elements helps to ensure that all stakeholders understand their roles and responsibilities, identify potential gaps or issues, and improve overall preparedness in the event of an actual incident.

Question 17

In digital forensic investigations for information security, most operations focus on policies-documents that provide managerial guidance for ongoing implementation and operations. ____________

Accepted Answer

Policies are essential in providing managerial guidance for ongoing implementation and operations in digital forensic investigations for information security.

Question 18

WLAN stands for "wide local area network." _________________________

Accepted Answer

wireless

Question 19

The primary goal of the external monitoring domain is to maintain an informed awareness of the state of all the organization's networks, information systems, and information security defenses. _________________________

Accepted Answer

internal

Question 20

The process of identifying and documenting specific and provable flaws in the organization's information asset environment is called vulnerability assessment (VA). _________________________

Accepted Answer

Vulnerability assessment is the process of identifying and documenting specific and provable flaws in the organization's information asset environment.

Quiz 12: Information Security Maintenance