Which policy recommends controls for securing and tracking organizational resources:

1. A. Access control policy
2. B. Administrative security policy
3. C. Acceptable use policy
4. D. Asset control policy

Correct Answer: D

To recover, analyze, and preserve computer and related materials in such a way that it can be presented as evidence in a court of law and identify the evidence in short time, estimate the potential impact of the malicious activity on the victim, and assess the intent and identity of the perpetrator is known as:

1. A. Computer Forensics
2. B. Digital Forensic Analysis
3. C. Forensic Readiness
4. D. Digital Forensic Examiner

Correct Answer: B

Incident management team provides support to all users in the organization that are affected by the threat or attack. The organization’s internal auditor is part of the incident response team. Identify one of the responsibilities of the internal auditor as part of the incident response team:

1. A. Configure information security controls
2. B. Perform necessary action to block the network traffic from suspected intruder
3. C. Identify and report security loopholes to the management for necessary actions
4. D. Coordinate incident containment activities with the information security officer

Correct Answer: C

A US Federal agency network was the target of a DoS attack that prevented and impaired the normal authorized functionality of the networks. According to agency’s reporting timeframe guidelines, this incident
should be reported within two (2) HOURS of discovery/detection if the successful attack is still ongoing and the agency is unable to successfully mitigate the activity. Which incident category of the US Federal Agency does this incident belong to?

1. A. CAT 5
2. B. CAT 1
3. C. CAT 2
4. D. CAT 6

Correct Answer: C

In the Control Analysis stage of the NIST’s risk assessment methodology, technical and none technical control methods are classified into two categories. What are these two control categories?

1. A. Preventive and Detective controls
2. B. Detective and Disguised controls
3. C. Predictive and Detective controls
4. D. Preventive and predictive controls

Correct Answer: A