Chapter 2

Question 1

Adverse Events

Answer 1

Events with negative consequences- system crashes, network packet floods, unauthorized use of system privileges, defacement of a web page, or execution of malicious code that destroys data

Question 2

Breach

Answer 2

loss of control, compromise, unauthorized disclosure

Question 3

Disaster recovery

Answer 3

processes, policies, and procedures related to preparing or for recovery or continuation of an organization’s critical business functions, technology infrastructure, systems, and applications after the organization experiences a disaster

Question 4

Business Continuity

Answer 4

Actions, processes, and tools for ensuring an organization can continue critical operations during a contingency

Question 5

Business Impact Analysis

Answer 5

Analysis of an information system’s requirements, functions, and interdependencies used to characterize system contingency requirements and priorities in the event of a significant disruption

Question 6

Event

Answer 6

observable occurrence in a network or system

Question 7

Exploit

Answer 7

Particular attack

Question 8

Incident

Answer 8

event that actually or potentially jeopardizes the confidentiality, integrity, or availability of an information system or the information the system processes, stores or transmits

Question 9

Incident handling

Answer 9

mitigations of violations of security policies and recommended practices

Question 10

Incident response plan

Answer 10

documentation of predetermined set of instructions or procedures to detect, respond to, and limit consequences of a malicious cyberattack against an organization’s information systems

Question 11

Threat

Answer 11

circumstance/event with the potential to adversely impact organizational operations

Question 12

Zero day

Answer 12

previously unknown system vulnerability with the potential of exploitation without risk of detection or prevention because it does not, in general, fit recognized patterns, signatures or method