Chapter 12 Flashcards
1
Q
A server that collects and stores raw data, and connects to field devices from which it receives raw data and passes data on to other SCADA systems, is known as what two terms below? A) loop server B) master terminal unit C) acquistions server D) I/O server
A
C) acquistions server
D) I/O server
2
Q
What two methods might be used by an ICS to control a physical system? A) cyclical control system B) actuating loop system C) open loop system D) closed loop system
A
C) open loop system
D) closed loop system
3
Q
A rollback is also known by what two terms below? A) backleveling B) backstepping C) downleveling D) downgrading
A
A) backleveling
D) downgrading
4
Q
What two terms describe the process that can reveal a great deal of information, called ESI (electronically stored information)? A) active data B) eDiscovery C) electronic discovery D) ambient data
A
B) eDiscovery
C) electronic discovery
5
Q
eDiscovery and computer forensics reveal what two different types of data? A) transient data B) active data C) ambient data D) encrypted data
A
B) active data
C) ambient data
6
Q
An active card, which contains an internal battery, can provide a usable range of up to what distance? A) 100 m B) 150 m C) 200 m D) 250 m
A
B) 150 m
7
Q
What type of software is a correction, improvement, or enhancement to a piece of software? A) patch B) upgrade C) rollback D) kludge
A
A) patch
8
Q
In computer forensics, hidden data such as deleted files and file fragments are known as what term? A) ambient data B) transient data C) tombstone data D) low level data
A
A) ambient data
9
Q
Which team role is the person on call who first notices or is alerted to a problem? A) manager B) dispatcher C) technical supporrt specialist D) public relations specialist
A
B) dispatcher
10
Q
What team member role coordinates the resources necessary to solve a problem? A) dispatcher B) manager C) technical support specialist D) public relations specialist
A
B) manager
11
Q
What team member role focuses on only one thing: solving the problem as quickly as possible? A) dispatcher B) manager C) technical support specialist D) publlic relations specialist
A
C) technical support specialist
12
Q
What team members role, if necessary, learns about the situation and the response and then acts as official spokesperson for the organization to the public or other interested parties? A) dispacter B) manager C) technical support specialist D) public relations specialist
A
D) public relations specialist
13
Q
Which of the following is NOT a step that should be taken as part of a response policy/
A) Secure the area and disconnected devices from the network
B) Create documentation detailing the scene
C) Attempt to access files to determine if they are compromised
D) Protect the chain of custody of evidence
A
C) Attempt to access files to determine if they are compromised
14
Q
What should be the first step of a response policy? A) Determine if escalation is necessary B) Secure the area C) Document the scene D) Monitor evidence and data collection
A
A) Determine if escalation is necessary
15
Q
At what type of recovery site would computers, devices, and connectivity necessary to rebuild a network exist, and all are appropriately configured, updated, and connected to match your network's current state? A) cold site B) warm site C) temp site D) hot site
A
D) hot site
