IHW&OS Sem 2

Question 1 of 1

  Time Left


0 [{"id":62543,"quiz_id":"4841","answer_id":null,"answerType_id":"2","created_at":"2016-05-05 04:49:30","updated_at":"2016-05-05 04:49:30","questionName":"Match the definition of the IR process with the name","questionTimeSeconds":"30","questionTimeMinutes":"0","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62544,"quiz_id":"4841","answer_id":null,"answerType_id":"2","created_at":"2016-05-05 04:53:22","updated_at":"2016-05-05 04:53:22","questionName":"Post-Incident phase if IR process","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62549,"quiz_id":"4841","answer_id":null,"answerType_id":"2","created_at":"2016-05-05 05:13:13","updated_at":"2016-05-05 05:13:13","questionName":"The CMA states","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62548,"quiz_id":"4841","answer_id":null,"answerType_id":"0","created_at":"2016-05-05 05:07:39","updated_at":"2016-05-05 05:07:39","questionName":"What does the preparation phase of the IR process entail?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62551,"quiz_id":"4841","answer_id":null,"answerType_id":"2","created_at":"2016-05-05 05:24:17","updated_at":"2016-05-05 05:24:17","questionName":"Match the following definitions","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62539,"quiz_id":"4841","answer_id":null,"answerType_id":"1","created_at":"2016-05-05 04:13:30","updated_at":"2016-05-05 04:32:33","questionName":"The purpose of an IR plan is that it provides details for implementing _____________________","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62540,"quiz_id":"4841","answer_id":null,"answerType_id":"1","created_at":"2016-05-05 04:24:01","updated_at":"2016-05-05 04:24:01","questionName":"There is a LOOP between the Detection and Analysis phase and the Containment Eradication and Recovery Phase of the IR Process","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62542,"quiz_id":"4841","answer_id":null,"answerType_id":"0","created_at":"2016-05-05 04:30:35","updated_at":"2016-05-05 04:30:35","questionName":"Who writes an incident response plan?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62541,"quiz_id":"4841","answer_id":null,"answerType_id":"1","created_at":"2016-05-05 04:26:21","updated_at":"2016-05-05 04:26:21","questionName":"There is a link from the Post-Incident Activity phase to the Preparation phase of the IR process","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62546,"quiz_id":"4841","answer_id":null,"answerType_id":"3","created_at":"2016-05-05 05:03:25","updated_at":"2016-05-05 05:03:25","questionName":"Put the following core stages of the detection and analysis phase (forensic investigation) in order from start to finish = Collect Preserves @ Pats","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":"uploads\/ihw-os-sem-2\/Picture1.png","position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62538,"quiz_id":"4841","answer_id":null,"answerType_id":"3","created_at":"2016-05-05 04:10:29","updated_at":"2016-05-05 04:10:29","questionName":"Put these IR process phases in order from 1 - 4","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":null,"explanation":"Loop between 2 & 3 and link from 4 - 1","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62545,"quiz_id":"4841","answer_id":null,"answerType_id":"0","created_at":"2016-05-05 04:55:52","updated_at":"2016-05-05 04:55:52","questionName":"Some benefits of having an IR programme in organisations are","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62550,"quiz_id":"4841","answer_id":null,"answerType_id":"2","created_at":"2016-05-05 05:15:36","updated_at":"2016-05-05 05:15:36","questionName":"Match the following in relation to Incident Response","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62547,"quiz_id":"4841","answer_id":null,"answerType_id":"0","created_at":"2016-05-05 05:05:14","updated_at":"2016-05-05 05:06:57","questionName":"For each item of desirable\/potential evidence, an organisation has to evaluate and IR procedures need to reflect answers to questions such as:","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null}]
62543
0
30
block

Match the definition of the IR process with the name

Match the text (click and drag)   

(0/0)




Match the text

Containment

Recovery

Eradication

Click and drag

eliminating components of an incident

restoring affected systems to normal operation and making sure they are working as they should after an incident happens

stopping an incident from spreading


62544
0
120
none
62549
0
120
none
62548
0
120
none
62551
0
120
none
62539
0
60
none
62540
0
120
none
62542
0
120
none
62541
0
60
none
62546
0
120
none
62538
0
60
none
62545
0
120
none
62550
0
120
none
62547
0
120
none