Incident Planning 4.8

Question 1

Table Top Exercise

Answer 1

• Key personnel sit down and discussing how to potentially handle a particular security scenario.

Question 2

Simulation

Answer 2

• Allows to perform a simulated attack to see the results.
• Security will intentionally perform a cyber attack.

Question 3

Root Cause Analysis

Answer 3

• Determine the root cause of a particular incident.
• Backtracking the incident to create conclusions regard the incident.
• Often incidents can be caused by a simple mistake.

Question 4

Threat Hunting

Answer 4

• Finding the threat first before the attacker.

Question 5

Issues with Threat Hunting

Answer 5

• Intelligence data is reactive
• You can’t see the attack until it happens.

Question 6

Preparation

Answer 6

• Includes all of the work prior to the incident.

Question 7

Detection

Answer 7

• Any method of identifying and determining an incident may be actively occurring.

Question 8

Analysis

Answer 8

• Provides detailed evidence for a security incident.