CDS348 Final Exam Questions And Answers
____ are highly probable when infected technologies are brought back online or when other infected computers that may have been offline at the time of the attack are brought back up. - Answer-follow-on disasters
/.____ is the inclusion of action steps t...
____ are highly probable when infected technologies are brought back online or when
other infected computers that may have been offline at the time of the attack are
brought back up. - Answer-follow-on disasters
/.____ is the inclusion of action steps to minimize the damage from disaster on the
organization's operations. - Answer-mitigation of impact
/.____ may be caused by earthquakes, floods, storm winds, tornadoes, or mud flows. -
Answer-rapid onset disasters
/.____ means making an organization ready for possible contingencies that can
escalate to become disasters. - Answer-preparation
/.A ____ is a collection of nodes in which the segments are geographically dispersed
and the physical link is often a data communications channel provided by a public
carrier. - Answer-WAN
/.A ____ is a description of the disasters that may befall an organization, along with
information on their probability of occurrence, a brief description of the organization's
actions to prepare for that disaster, and the best case, worst case, and most likely case
outcomes of the disaster. - Answer-disaster scenario
/.a blank attack is much more substantial than a DoS attack because of the use of
multiple systems to simultaneously attack a single target - Answer-distributed denial of
service
/.a blank rootkit is one that becomes a part of the system bootstrap process and is
loaded every time the system boots - Answer-persistent
/.A business continuity _____ is responsible for establishing the core business functions
needed to sustain critical business operations. - Answer-operations team
/.A certification offered by the Business Continuity Institute is called ____. - Answer-
certificate of the business continuity institute
, /.a forensics team typically uses two methods to document a scene as it exists at the
time of arrival: photography and blank - Answer-field notes
/.A process known as adversity management is an organization's set of planning and
preparation efforts for dealing with potential human injury, emotional trauma, loss of life,
or damage to an organization's reputation or image as a result of a disaster. - Answer-
false
/.a quick determination of the extent of damage or loss and the associated cost or value
associated with an incident is known as a(n) blank - Answer-incident impact
assessment
/.a quick determination of the extent of damage or loss and the associated cost or value
associated with an incident is known as blank - Answer-incident impact assessment
/.A scripted description of the disaster that avoids impeding the notification process by
consisting of just enough information so that each responder knows what portion of the
DR plan to implement is known as the trigger message. - Answer-false
/.a series of steps that follow the stages of a cyberattack from early reconnaissance to
the exfiltration of data is known as the blank - Answer-cyber kill chain
/.a session blank is a small data file that is valid for just one connection to a web site,
which uses it to "make notes" about that visit - Answer-cookie
/.a set of software functionalities with capabilities that different clients can reuse for
different purposes is called a(n) blank - Answer-service
/.a staffed control room where key security technologies, networks, and critical systems
are monitored for incidents is known as a(n) - Answer-security operations center
/.a unique value or pattern of an attack that enables detection is called a(n) - Answer-
signature
/.A(n) blank may signal an adverse event is under way and provide a notification of an
incident candidate - Answer-indicator
/.A(n) blank may signal an incident that could occur in the future - Answer-precursor
/.according to NIST, which of the following is an example of an unauthorized access
attack - Answer-modifying web based content without permission
/.after the immediacy of incident containment has passed, the organization is still faced
with the unavailability that inevitable results after an unauthorized access to a system -
Answer-false
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller kartelodoc. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $9.49. You're not tied to anything after your purchase.
