Security Strategies in Windows Platforms and Applications, 3rd Edition

CHAPTER 13 ASSESSMENT

1.   1. To ensure a secure computing environment, investigate each reported event.

   1. True

   2. False

2.   2. Many incidents go unreported because they are never recognized.

   1. True

   2. False

3.   3. Which of the following is the best description of the CSIRT’s initial responsibility for incidents?

   1. Recognize incidents.

   2. Validate that an incident has occurred.

   3. Initiate the incident investigation.

   4. Contain the incident damage.

4.   4. The ________ step of handling incidents should always occur before an incident happens.

5.   5. Which incident-handling step might include disconnecting a computer from the network?

   1. Identification

   2. Eradication

   3. Containment

   4. Recovery

6.   6. The ________ step to handling incidents is the most important step to continuously ...