IHW&OS Sem 2

Exit

Question 1 of 1

  Time Left


0 [{"id":62551,"quiz_id":"4841","answer_id":null,"answerType_id":"2","created_at":"2016-05-05 05:24:17","updated_at":"2016-05-05 05:24:17","questionName":"Match the following definitions","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62547,"quiz_id":"4841","answer_id":null,"answerType_id":"0","created_at":"2016-05-05 05:05:14","updated_at":"2016-05-05 05:06:57","questionName":"For each item of desirable\/potential evidence, an organisation has to evaluate and IR procedures need to reflect answers to questions such as:","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62539,"quiz_id":"4841","answer_id":null,"answerType_id":"1","created_at":"2016-05-05 04:13:30","updated_at":"2016-05-05 04:32:33","questionName":"The purpose of an IR plan is that it provides details for implementing _____________________","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62550,"quiz_id":"4841","answer_id":null,"answerType_id":"2","created_at":"2016-05-05 05:15:36","updated_at":"2016-05-05 05:15:36","questionName":"Match the following in relation to Incident Response","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62541,"quiz_id":"4841","answer_id":null,"answerType_id":"1","created_at":"2016-05-05 04:26:21","updated_at":"2016-05-05 04:26:21","questionName":"There is a link from the Post-Incident Activity phase to the Preparation phase of the IR process","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62538,"quiz_id":"4841","answer_id":null,"answerType_id":"3","created_at":"2016-05-05 04:10:29","updated_at":"2016-05-05 04:10:29","questionName":"Put these IR process phases in order from 1 - 4","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":null,"explanation":"Loop between 2 & 3 and link from 4 - 1","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62546,"quiz_id":"4841","answer_id":null,"answerType_id":"3","created_at":"2016-05-05 05:03:25","updated_at":"2016-05-05 05:03:25","questionName":"Put the following core stages of the detection and analysis phase (forensic investigation) in order from start to finish = Collect Preserves @ Pats","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":"uploads\/ihw-os-sem-2\/Picture1.png","position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62542,"quiz_id":"4841","answer_id":null,"answerType_id":"0","created_at":"2016-05-05 04:30:35","updated_at":"2016-05-05 04:30:35","questionName":"Who writes an incident response plan?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62544,"quiz_id":"4841","answer_id":null,"answerType_id":"2","created_at":"2016-05-05 04:53:22","updated_at":"2016-05-05 04:53:22","questionName":"Post-Incident phase if IR process","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62540,"quiz_id":"4841","answer_id":null,"answerType_id":"1","created_at":"2016-05-05 04:24:01","updated_at":"2016-05-05 04:24:01","questionName":"There is a LOOP between the Detection and Analysis phase and the Containment Eradication and Recovery Phase of the IR Process","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62549,"quiz_id":"4841","answer_id":null,"answerType_id":"2","created_at":"2016-05-05 05:13:13","updated_at":"2016-05-05 05:13:13","questionName":"The CMA states","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62548,"quiz_id":"4841","answer_id":null,"answerType_id":"0","created_at":"2016-05-05 05:07:39","updated_at":"2016-05-05 05:07:39","questionName":"What does the preparation phase of the IR process entail?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62543,"quiz_id":"4841","answer_id":null,"answerType_id":"2","created_at":"2016-05-05 04:49:30","updated_at":"2016-05-05 04:49:30","questionName":"Match the definition of the IR process with the name","questionTimeSeconds":"30","questionTimeMinutes":"0","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":62545,"quiz_id":"4841","answer_id":null,"answerType_id":"0","created_at":"2016-05-05 04:55:52","updated_at":"2016-05-05 04:55:52","questionName":"Some benefits of having an IR programme in organisations are","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":null,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null}]
62551
0
120
block

Match the following definitions

Match the text (click and drag)   

(0/0)




Match the text

Event

Incident (security)

observable occurances

Click and drag

real or suspected adverse event in computer systems, network or applications

user sends an email / server receives request for web page / firewall blocks a connection attempt

observable occurance


62547
0
120
none
62539
0
60
none
62550
0
120
none
62541
0
60
none
62538
0
60
none
62546
0
120
none
62542
0
120
none
62544
0
120
none
62540
0
120
none
62549
0
120
none
62548
0
120
none
62543
0
30
none
62545
0
120
none