IT Exam Items Repository

What is the role of a Computer Emergency Response Team?
ITExamAnswers Editorial Team asked 6 years ago • 
What information is gathered by the CSIRT when determining the scope of a security incident?
ITExam Editorial Team asked 6 years ago • 
Which schema or model was created to anonymously share quality information about security events to the security community?
ITExamAnswers Editorial Team asked 6 years ago • 
What is the role of vendor teams as they relate to CSIRT?
ITExamAnswers Editorial Team asked 6 years ago • 
Which action is taken in the postincident phase of the NIST incident response life cycle?
ITExamAnswers Editorial Team asked 6 years ago • 
What is a benefit of using the VERIS community database?
ITExamAnswers Editorial Team asked 6 years ago • 
The network administrator believes that the threat actor used a commonly available tool to slow the server down. The administrator concludes that based on the source IP address identified in the alert, the threat actor was probably one of the students. What type of hacker would the student be classified as?
ITExamAnswers Editorial Team asked 6 years ago • 
Reports of network slowness lead the network administrator to review server alerts. The administrator confirms that an alert was an actual security incident. Which type of security alert classification would this be?
ITExamAnswers Editorial Team asked 6 years ago • 
The threat actor has already placed malware on the server causing its performance to slow. The network administrator has found and removed the malware as well as patched the security hole where the threat actor gained access. The network administrator can find no other security issue. What stage of the Cyber Kill Chain did the threat actor achieve?
ITExamAnswers Editorial Team asked 6 years ago • 
If the web server runs Microsoft IIS, which Windows tool would the network administrator use to view the access logs?
ITExamAnswers Editorial Team asked 6 years ago • 
What is defined in the SOP of a computer security incident response capability (CSIRC)?
ITExam Editorial Team asked 6 years ago • 
After containment, what is the first step of eradicating an attack?
ITExam Editorial Team asked 6 years ago • 
According to NIST standards, which incident response stakeholder isresponsible for coordinating an incident response with other stakeholders to minimize the damage of an incident?
ITExamAnswers Editorial Team asked 6 years ago • 
Which approach can help block potential malware delivery methods, as described in the Cyber Kill Chain model, on an Internet-facing web server?
ITExamAnswers Editorial Team asked 6 years ago • 
What type of CSIRT organization is responsible for determining trends to help predict and provide warning of future security incidents?
ITExamAnswers Editorial Team asked 6 years ago • 
« Previous1…1,1691,1701,1711,1721,173…1,378Next »