Incident Response

Question 1

Which plan disscusses cold sites and recovery point objectives

Answer 1

Disaster Recovery Plans

Question 2

What plan is this?

1. Providing continuity of the orgs operations
2. Improved protection of the orgs assets
   3.Enhanced physical and data security
3. Reduced insurance costs

Answer 2

Disaster recovery plan

Question 3

At what stage do you gather information about an incident?

Answer 3

Observe

Question 4

At what stage do you analyze the info you have gathered and assess the situation

Answer 4

Orient

Question 5

What tools would be included in the “Observe” category of the OBserve-Orient-Decide- Act (OODA) Loop?

Answer 5

Security information and event management
Intrusion detection systems
Netflow analyzers
Vulnerability scanners
Availability monitoring
Web proxies

The observe category includes security monitoring tools identifying events that might need further investigation.