Section 4.8

Question 1

What is a tabletop exercise?

Answer 1

Tabletop exercise involves all the stakeholders sitting around a table and logically going through a simulated disaster recovery.

Question 2

What are simulation tests?

Answer 2

Simulations are tests that simulate an event such as a Phishing attack, password request and data breaches. It is meant to test the security systems and people in the organizations.

Question 3

What is Threat Hunting?

Answer 3

Threat Hunting means that the security team is hunting for different vulnerabilities that may be in the system in order to identify it and mitigate it before it is attacked by a hacker.

Question 4

What is Digital Forensics?

Answer 4

Digital Forensics is the process of collecting and protecting information relating to an intrusion.

Question 5

What is a Legal Hold?

Answer 5

A legal hold is a legal technique (using a lawyer) to protect relevant information by informing the company about the type of data that needs to be store and how much of that data needs to be stored.

Question 6

What is the purpose of Data Custodians?

Answer 6

Data Custodians have access to all of the data

Question 7

What is the Chain of Custody?

Answer 7

Chain of custody is the process of maintaining the integrity of the data and having a log of whoever accesses the data overtime.

Question 8

What is E Discovery?

Answer 8

E Discovery is the process of collecting, preparing, reviewing, interpreting and producing electronic documents.