1. _ incident responses enables the organization to react to a detected incident quickly and effectively, without confusion or wasted time and effort.

  

a.

Recording

 

b.

Publishing

 

c.

Predefining

 

d.

Discussing

5 points   

QUESTION 2

1. The U.S. National Institute of Standards and Technology recommends a set of tools for the CSIRT including incident reporting mechanisms with which users can report suspected incidents. At least one of these mechanisms should permit people to report incidents ____.

  

a.

anonymously

 

b.

directly to the CSO

 

c.

online

 

d.

for a reward

5 points   

QUESTION 3

1. In a(n) ____________________ plan test strategy, each potential participant individually details the performance of each task, though stopping short of the actual physical task required.

5 points   

QUESTION 4

1. A recommended practice for the implementation of the physical IR plan is to select a ____ binder.

  

a.

green

 

b.

red

 

c.

black

 

d.

blue

5 points   

QUESTION 5

1. In ____________________ training, prepackaged software provides training at the trainee’s workstation.

5 points   

QUESTION 6

1. Incident analysis resources include network diagrams and lists of ____, such as database servers.

  

a.

desk checks

 

b.

protocol analyzers

 

c.

critical assets

 

d.

simulation software

5 points   

QUESTION 7

1. The Southeast Collegiate Cyber Defense Competition is unique in that it focuses on the operational aspect of managing and protecting an existing network infrastructure. Unlike “capture-the-flag ” exercises, this competition is exclusively a real-world ____ competition.

  

a.

defensive

 

b.

hacking

 

c.

end-user training

 

d.

offensive

5 points   

QUESTION 8

1. The IR plan is usually ____ when an incident causes minimal damage with little or no disruption to business operations.

  

a.

placed on alert

 

b.

placed on standby

 

c.

activated

 

d.

not activated

5 points   

QUESTION 9

1. A final IR plan should be tested at least ____________________ by performing at least a structured walk-through test and a more realistic type of test, when possible.

5 points   

QUESTION 10

1. ____ is the process of systematically examining information assets for evidentiary material that can provide insight into how an incident transpired.

  

a.

Disaster recovery

 

b.

Incident response

 

c.

War gaming

 

d.

Forensics analysis

5 points   

QUESTION 11

1. Organizing the incident response planning process begins with staffing the disaster recovery committee.

True

False

5 points   

QUESTION 12

1. Should an incident begin to escalate, the CSIRT team leader continues to add resources and skill sets as necessary to attempt to contain and terminate the incident. The resulting team is called the ____ for this particular incident.

  

a.

response unit

 

b.

forensic team

 

c.

IR unit

 

d.

reaction force

5 points   

QUESTION 13

1. The responsibility for creating an organization’s IR plan often falls to the ____.

  

a.

chief information   security officer

 

b.

database   administrator

 

c.

forensic expert

 

d.

project manager

5 points   

QUESTION 14

1. A recommended practice for the implementation of the physical IR plan document is to organize the contents so that the first page contains the ____ actions.

  

a.

“during attack”

 

b.

“before attack”

 

c.

training

 

d.

testing

5 points   

QUESTION 15

1. A favorite pastime of information security professionals is ____, which is a simulation of attack and defense activities using realistic networks and information systems.

  

a.

war gaming

 

b.

parallel testing

 

c.

simulation

 

d.

structured   walk-through

5 points   

QUESTION 16

1. The ____ Department of an organization needs to review the procedures of the CSIRT and understand the steps the CSIRT will perform to ensure it is within legal and ethical guidelines for the municipal, state, and federal jurisdictions.

  

a.

Auditing

 

b.

Labor

 

c.

Legal

 

d.

Public Relations

5 points   

QUESTION 17

1. The training delivery method with the lowest cost to the organization is ____.

  

a.

user support group

 

b.

self-study   (noncomputerized)

 

c.

on-the-job training

 

d.

one-on-one

5 points   

QUESTION 18

1. In computer-based training settings, trainees receive a seminar presentation at their computers.

True

False

5 points   

QUESTION 19

1. General users require training on the technical details of how to do their jobs securely, including good security practices, ____ management, specialized access controls, and violation reporting.

  

a.

password

 

b.

war gaming

 

c.

“before action”

 

d.

organization

5 points   

QUESTION 20

1. There are several national training programs that focus on incident response tools and techniques.

True

False

Complete the following problem in your textbook:

From Chapter 8:  Problems: 15, 18, and 29

From Chapter 9: Problems: 4, 13, 21 and 23

All work should be submitted in Excel with one (1) problem per tab in a single workbook. Formulas should be used as opposed to outside or manual calculations. Use of Excel add-ins is encouraged.

Data files can be downloaded from http://wps.prenhall.com/bp_evans_bus_2/ (Links to an external site.) 

Chapter 8:

15. “The Excel file Concert Sales provides data on sales dollars and the number of radio, TV, and newspaper ads promoting the concerts for a group of cities. Develop simple linear regression models for predicting sales as a function of the number of each type of ad. Compare these results to a multiple linear regression model using both independent variables. Examine the residuals of the best model for regression assumptions and possible outliers.”

18. “The Excel file Salary Data provides information on current salary, beginning salary, previous experience (in months) when hired, and total years of education for a sample of 100 employees in a firm. 

a.) Develop a multiple regression model for predicting current salary as a function of the other variables. 

b.) Find the best model for predicting current salary using the t-value criterion.”

29. See Attachment

Chapter 9:

4. “The Excel file Unemployment Rates provides data on monthly rates for 4 years. Compare 3- and 12-month moving average forecasts using the MAD criterion. Explain why the 3-month model yields better results.”

13. “Use the Holt-Winters no-trend model to find the best model to forecast the next year of electricity usage in the Excel file Gas & Electric.”

21. “Choose an appropriate forecasting technique for the data in the Excel file Prime Rate and find the best forecasting model. Explain how you would use the model to forecast and how far into the future it would be appropriate to forecast.”

23. “Data in the Excel File Microprocessor Data shows the demand for one type of chip used in industrial equipment from a small manufacturer. 

a.) Construct a chart of the data. What appears to happen when a new chip is introduced?

b.) Develop a causal regression model to forecast demand that includes both time and the introduction of a new chip as explanatory variables.

c.)What would the forecast be for the next month if a new chip is introduced? What would it be if a new chip is not introduced?”