CPSC 420 Chapter Notes - Chapter chapter 8: Vulnerability Management, Legacy System, Software Development Process

39 views2 pages

pdopler16

18 Jan 2023

School

Evangel University

Department

Computer Science

Course

CPSC 420

Professor

For unlimited access to Textbook Notes, a Class+ subscription is required.

Document Summary

Good practices to put incident response plans in: incidents can happen at any time, and having a plan in place ensures that everyone knows what to do in the event of an incident. It helps to ensure that the incident is handled in a timely and efficient manner. It helps to ensure that critical data and systems are protected in the event of an incident. It helps to ensure that the organization is able to resume normal operations as quickly as possible after an incident. It helps to improve the overall security of the organization by identifying weaknesses and vulnerabilities that can be addressed. Closely monitored elements: the load on the system. The level of vigilance over the system can be relaxed after an initial deployment phase, but it is important to keep monitoring the system to ensure that it continues to operate smoothly.

Related Questions

A Or D ???

A security analyst is trying to identify the source of a recent data loss incident. The analyst has reviewed all the logs the time surrounding the incident and identified all the assets on the network at the time of the data loss. The analyst suspect the key to finding the source was obfuscated in an application. Which of the following should the analyst use NEXT?

Software decomplier
Network enumerator
Log reduction and analysis tool
Static code analysis

aminul2005

Ann, a CIRT member, is conducting incident response activities on a network that consists of several hundred virtual servers and thousands of endpoints and users. The network generates more than 10,000 log messages per second. The enterprise belong to a large, web-based cryptocurrency startup, Ann has distilled the relevant information into an easily digestible report for executive management . However, she still needs to collect evidence of the intrusion that caused the incident. Which of the following should Ann use to gather the required information?

Options:

A Traffic interceptor log analysis
B Log reduction and visualization tools
C Proof of work analysis
D Ledger analysis software

aminul2005

Ann, a CIRT member, is conducting incident response activities on a network that consists of several hundred virtual servers and thousands of endpoints and end users. The network generates more than 10,000 log messages per second. The enterprise belongs to a large, web-based cryptocurrency startup. Ann has disabled the relevant information into an easily digestible report for executive management. However, she still needs to collect evidence of the intrusion that caused the incident. Which of the following should Ann use to gather the required information?

Traffic interceptor log analysis
Log reduction and visualization tools
Proof of work analysis
Ledger analysis software

Ans A : And Justification

ANS A. Ann, a CIRT member, is conducting incident response activities on a network that consists of several hundred virtual servers and thousands of endpoints and end users. The network generates more than 10,000 log messages per second. The enterprise belongs to a large, web-based cryptocurrency startup. Ann has disabled the relevant information into an easily digestible report for executive management. However, she still needs to collect evidence of the intrusion that caused the incident. Which of the following should Ann use to gather the required information :-

- Traffic interceptor log analysis

Ans Option B

Log reduction and visualization tools

Based on the given information this is the correct answer

Ans : correct answer is proof of work analysis

because when Ann has distilled the relevant information into an easily digestable report for executive manager then their is a need to be any proof of that incident to be post on a network and basically several hundred virtual servers are connected and cryptocurrency startup so, proof of work analysis plays an important role here.

confused : Please suggest

aminul2005

CPSC 420 Chapter Notes - Chapter chapter 8: Vulnerability Management, Legacy System, Software Development Process

Document Summary

Get access

Related Documents

CPSC 420 Chapter : Week 6-Reading Assignment

CPSC 420 Chapter Notes - Chapter 3: Mobile Computing, Malware

CPSC 420 Chapter Notes - Chapter 7: Penetration Test, Deployment Environment

Related Questions