Question 1

Each organization sets policy to choose one of two approaches when employing digital forensics. Select the statement that best identifies the options.
A) Protect and forget
B) Apprehend and prosecute 
C) Neither of these is an approach to be chosen
D) Both of these are approaches that might be chosen

Accepted Answer

Both options of "Protect and forget" and "Apprehend and prosecute" are valid approaches that can be chosen by an organization when employing digital forensics. "Protect and forget" focuses on identifying and mitigating risks without necessarily pursuing legal action, while "Apprehend and prosecute" involves using digital forensics to gather evidence and take legal action against perpetrators. Ultimately, the approach chosen will depend on an organization's specific goals and priorities.

Question 2

Almost all aspects of a company's environment are ____________________, meaning threats that were originally assessed in the early stages of the project's systems development life cycle have probably changed and new priorities have emerged.

Accepted Answer

The answer of Almost all aspects of a company's environment...

Question 3

The ____________________ tester's ultimate responsibility is to identify weaknesses in the security of the organization's systems and networks and then present findings to the system owners in a detailed report.

Accepted Answer

The answer of The ____________________ tester's ultimate responsibility is to...

Question 4

A performance ____________________ is an expected level of performance against which all subsequent levels of performance are compared.

Accepted Answer

The answer of A performance ____________________ is an expected level...

Question 5

Organizations should perform a(n) ____________________ assessment of their information security programs.

Accepted Answer

The answer of Organizations should perform a(n) ____________________ assessment of...

Question 6

The objective of the external ____________________ domain within the maintenance model is to provide early awareness of new and emerging threats, threat agents, vulnerabilities, and attacks that the organization needs in order to mount an effective and timely defense.

Accepted Answer

The answer of The objective of the external ____________________ domain...

Question 7

__________ allows for major security control components to be reviewed on a periodic basis to ensure that they are current, accurate, and appropriate.
A) System review
B) Project review 
C) Program review
D) Application review

Accepted Answer

The answer of __________ allows for major security control components...

Question 8

In digital forensics, all investigations follow the same basic methodology once permission for search and seizure has been obtained. Which of the following is NOT one of the elements of that process  
A) Analyze the data without risking modification or unauthorized access.
B) Report the findings to the proper authority. 
C) Determine whether to "apprehend and prosecute."
D) Identify relevant EM.

Accepted Answer

The process for digital forensics investigations typically involves securing the device or media being investigated, making a forensic copy of the data, analyzing that data for evidence, and then reporting findings to the proper authorities. While prosecution may be a potential outcome of the investigation, determining whether or not to apprehend and prosecute is typically the decision of law enforcement or the prosecuting agency rather than a step in the investigation process itself.

Question 9

When an organization uses specific hardware and software products as part of its information security program, the ____________________ external intelligence source often provides either direct support or indirect tools that allow user communities to support each other.

Accepted Answer

The answer of When an organization uses specific hardware and...

Question 10

As the help desk personnel screen problems, they must also track the activities involved in resolving each complaint in a help desk ____________________ system.

Accepted Answer

The answer of As the help desk personnel screen problems,...

Question 11

As each project nears , a(n) ____________________ risk assessment group reviews the impact of the project on the organization's risk profile.

Accepted Answer

The answer of As each project nears , a(n) ____________________...

Question 12

The process of collecting detailed information about devices in a network is often referred to as ____________________.

Accepted Answer

The answer of The process of collecting detailed information about...

Question 13

A(n) ____________________ analysis is a procedure that compares the current state of a network segment (the systems and services it offers) against a known previous state of that same network segment (the baseline of systems and services).

Accepted Answer

The answer of A(n) ____________________ analysis is a procedure that...

Question 14

The __________ vulnerability assessment is designed to find and document vulnerabilities that may be present in the organization's wireless local area networks.
A) wireless
B) phone-in 
C) battle-dialing
D) network

Accepted Answer

The question specifically mentions "wireless local area networks", so the most appropriate choice would be a "wireless" vulnerability assessment. The other choices, like "phone-in" and "battle-dialing", are not relevant to wireless networks, and a "network" vulnerability assessment may not specifically target wireless vulnerabilities.

Question 15

The primary goal of the vulnerability assessment and ____________________ domain is to identify specific, documented vulnerabilities and remediate them in a timely fashion.

Accepted Answer

The answer of The primary goal of the vulnerability assessment...

Question 16

____________________ is the process of reviewing the use of a system, not to check performance but to determine if misuse or malfeasance has occurred.

Accepted Answer

The answer of ____________________ is the process of reviewing the...

Question 17

The primary objective of the planning and ____________________ domain is to keep a lookout over the entire information security program.

Accepted Answer

The answer of The primary objective of the planning and...

Question 18

____________________ interconnections are the network devices, communications channels, and applications that may not be owned by the organization but are essential to the organization's cooperation with another company.

Accepted Answer

The answer of ____________________ interconnections are the network devices, communications...

Question 19

The ____________________ vulnerability assessment is designed to find and document vulnerabilities that may be present in the organization's public network.

Accepted Answer

The answer of The ____________________ vulnerability assessment is designed to...

Question 20

The primary goal of the ____________________ monitoring domain is an informed awareness of the state of all the organization's networks, information systems, and information security defenses.

Accepted Answer

The answer of The primary goal of the ____________________ monitoring...

Quiz 12: Information Security Maintenance

Each organization sets policy to choose one of two approaches when employing digital forensics. Select the statement that best identifies the options.

Almost all aspects of a company's environment are ____________________, meaning threats that were originally assessed in the early stages of the project's systems development life cycle have probably changed and new priorities have emerged.