100% satisfaction guarantee Immediately available after payment Both online and in PDF No strings attached
logo-home
CDS 348 Final Exam Study Questions and Answers $12.49   Add to cart

Exam (elaborations)

CDS 348 Final Exam Study Questions and Answers

 0 view  0 purchase
  • Course
  • 2024/2025
  • Institution
  • 2024/2025

CDS 348 Final Exam Study Questions and Answers A CSIRT model in which a single CSIRT handles incidents throughout the organization is called a(n) - Ans:-central CSIRT A CSIRT model that is effective for large organizations and for organizations with major computing resources at distant locatio...

[Show more]

Preview 3 out of 18  pages

  • October 15, 2024
  • 18
  • 2024/2025
  • Exam (elaborations)
  • Questions & answers
  • 2024/2025
  • 2024/2025
avatar-seller
GraceAmelia
GRACEAMELIA 2024/2025 ACADEMIC YEAR ©2024. ALL RIGHTS
RESERVED. FIRST PUBLISH OCTOBER, 2024



CDS 348 Final Exam Study Questions
and Answers

A CSIRT model in which a single CSIRT handles incidents throughout the organization is called

a(n) - Ans:✔✔-central CSIRT


A CSIRT model that is effective for large organizations and for organizations with major

computing resources at distant locations is the - Ans:✔✔-distributed CSIRT


A key step in the ____ approach to incident response is to discover the identity of the intruder

while documenting his or her activity. - Ans:✔✔-apprehend and prosecute


Giving the IR team the responsibility for ____ is generally not recommended. - Ans:✔✔-patch

management


In the absence of the assigned team manager, the ____ should assume authority for overseeing

and evaluating a provided service. - Ans:✔✔-deputy team manager


One way to build and maintain staff skills is to develop incident-handling ____ and have the

team members discuss how they would handle them. - Ans:✔✔-scenarios


The announcement of an operational CSIRT should minimally include - Ans:✔✔-contact

methods and numbers

Page 1/18

,GRACEAMELIA 2024/2025 ACADEMIC YEAR ©2024. ALL RIGHTS
RESERVED. FIRST PUBLISH OCTOBER, 2024

The champion for the CSIRT may be the same person as the champion for the entire IR function-

typically, the - Ans:✔✔-chief information officer


The CSIRT must have a clear and concise ____ statement that, in a few sentences,

unambiguously articulates what it will do - Ans:✔✔-mission


The determination of what systems fall under the CSIRT 's responsibility is called its ____. -

Ans:✔✔-scope of operations


The first step in building a CSIRT is to - Ans:✔✔-obtain management support and buy-in


The focus during a(n) ____ is on learning what worked, what didn't, and where communications

and response procedures may have failed. - Ans:✔✔-after action review


The organization must first understand what skills are needed to effectively respond to an

incident. If necessary, management must determine if it is willing to acquire needed ____ to fill

in the gaps. - Ans:✔✔-personnel


Those services performed in response to a request or a defined event such as a help desk alert

are called - Ans:✔✔-reactive services


Those services undertaken to prepare the organization or the CSIRT constituents to protect and

secure systems in anticipation of problems, attacks, or other events are called - Ans:✔✔-

proactive services




Page 2/18

, GRACEAMELIA 2024/2025 ACADEMIC YEAR ©2024. ALL RIGHTS
RESERVED. FIRST PUBLISH OCTOBER, 2024

When an organization completely outsources its IR work, typically to an on-site contractor, it is

called a(n) ____ model. - Ans:✔✔-fully outsourced


As soon as the CSIRT is able to determine what exactly is happening, it is expected to report its

preliminary finding to management. - Ans:✔✔-True


One of the first signals that an organization is making progress in the development of its IR

program, specifically in the development of its CSIRT, is a dramatic drop in the number of

identified incidents. - Ans:✔✔-False


Regardless of which IR model an organization chooses, multiple employees should be in charge

of incident response. - Ans:✔✔-False


The CSIRT is also known as the IR Reaction Team. - Ans:✔✔-True


A ____ attack is much more substantial than a DoS attack because of the use of multiple

systems to simultaneously attack a single target - Ans:✔✔-distributed denial-of-service


A ____ is a small quantity of data kept by a Web site as a means of recording that a system has

visited that Web site. - Ans:✔✔-cookie


Which of the following is an example of a UA (Unauthorized Access) attack? - Ans:✔✔-

Modifying Web-based content without permission




Page 3/18

The benefits of buying summaries with Stuvia:

Guaranteed quality through customer reviews

Guaranteed quality through customer reviews

Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.

Quick and easy check-out

Quick and easy check-out

You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.

Focus on what matters

Focus on what matters

Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!

Frequently asked questions

What do I get when I buy this document?

You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.

Satisfaction guarantee: how does it work?

Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.

Who am I buying these notes from?

Stuvia is a marketplace, so you are not buying this document from us, but from seller GraceAmelia. Stuvia facilitates payment to the seller.

Will I be stuck with a subscription?

No, you only buy these notes for $12.49. You're not tied to anything after your purchase.

Can Stuvia be trusted?

4.6 stars on Google & Trustpilot (+1000 reviews)

82956 documents were sold in the last 30 days

Founded in 2010, the go-to place to buy study notes for 14 years now

Start selling
$12.49
  • (0)
  Add to cart