CyberRookie CSX Fundamentals - Section 5: Incident Response

Document Content and Description Below

All organizations need to put significant effort into Correct Answer: Protecting and preventing cyberattacks from causing harm or disruption Security controls are not perfect and cannot completel... y eliminate all risk Correct Answer: It is important that organizations prepare for, and are capable of detecting and managing, potential cybersecurity problems. An event Correct Answer: Is any change, error or interruption within an IT infrastructure such as a system crash, a disk error or a user forgetting their password. The National Institute of Standards and Technology (NIST) defines an event as Correct Answer: Any observable occurrence in a system or network. NIST defines an incident as Correct Answer: A violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices. An incident is Correct Answer: The attempted or successful unauthorized access, use, disclosure, modification or loss of information or interference with system or network operations. An incident is Correct Answer: The activity of a human threat agent. An incident is Correct Answer: Anything disruptive, including a court order for discovery of electronic information or disruption from a natural disaster. Regardless of the exact definition used by a particular organization Correct Answer: It is important to distinguish between events that are handled in the normal course of business and incidents A cybersecurity incident Correct Answer: Is an adverse event that negatively impacts the confidentiality, integrity and availability of data. Cybersecurity incidents Correct Answer: May be unintentional, such as someone forgetting to activate an access list in a router, or intentional, such as a targeted attack by a hacker Technical incidents include Correct Answer: Viruses, malware, denial-of-service (DoS) and system failure Physical incidents Correct Answer: May include social engineering and lost or stolen laptops or mobile devices US-CERT provides t [Show More]

Last updated: 1 year ago

Preview 1 out of 16 pages