Cyber Security Tools

Question 1

Antivirus software

Answer 1

A software program used to prevent, detect, and eliminate malware and viruses

Question 2

Security information and event management (SIEM)

Answer 2

An application that collects and analyzes log data to monitor critical activities in an organization

Question 3

Splunk

Answer 3

`A data analysis platform

Question 4

Chronicle

Answer 4

is a cloud-native SIEM tool that stores security data for search and analysis. Cloud-native means that Chronicle allows for fast delivery of new features.

Question 5

Network protocol analyzer (packet sniffer)

Answer 5

A tool designed to capture and analyze data traffic within a network

Question 6

chain of custody playbook

Answer 6

process of documenting evidence possession and control during an incident lifecycle

Question 7

protecting and preserving evidence playbook

Answer 7

properly working with fragile and volatile digital evidence

Question 8

order of volatility

Answer 8

a sequence outlining the order of data that must be preserved from first to last