Question 1

Which of the following terms may be defined as “a measure of possible inability to achieve a goal, objective, or target within a defined security, cost plan and
technical limitations that adversely affects the organization’s operation and revenues?

Accepted Answer

Correct answer: A

Question 2

Business continuity is defined as the ability of an organization to continue to function even after a disastrous event, accomplished through the deployment of
redundant hardware and software, the use of fault tolerant systems, as well as a solid backup and recovery strategy. Identify the plan which is mandatory part of a
business continuity plan?

Accepted Answer

Correct answer: B

Question 3

Identify the malicious program that is masked as a genuine harmless program and gives the attacker unrestricted access to the user’s information and system.
These programs may unleash dangerous programs that may erase the unsuspecting user’s disk and send the victim’s credit card numbers and passwords to a
stranger.

Accepted Answer

Correct answer: C

Question 4

An incident recovery plan is a statement of actions that should be taken before, during or after an incident. Identify which of the following is NOT an objective of the
incident recovery plan?

Accepted Answer

Correct answer: A

Question 5

Multiple component incidents consist of a combination of two or more attacks in a system. Which of the following is not a multiple component incident?

Accepted Answer

Correct answer: A

Question 6

When an employee is terminated from his or her job, what should be the next immediate step taken by an organization?

Accepted Answer

Correct answer: A

Question 7

In the Control Analysis stage of the NIST’s risk assessment methodology, technical and none technical control methods are classified into two categories. What
are these two control categories?

Accepted Answer

Correct answer: A

Question 8

Risk management consists of three processes, risk assessment, mitigation and evaluation. Risk assessment determines the extent of the potential threat and the
risk associated with an IT system through its SDLC. How many primary steps does NIST’s risk assessment methodology involve?

Accepted Answer

Correct answer: D

Question 9

Which one of the following is the correct sequence of flow of the stages in an incident response:

Accepted Answer

Correct answer: B

Question 10

Except for some common roles, the roles in an IRT are distinct for every organization. Which among the following is the role played by the Incident Coordinator of
an IRT?

Accepted Answer

Correct answer: B