Questions

The following is a short list of review questions to help reinforce your learning and help you identify areas that require some improvement. The answers to the questions can be found in the Assessments section at the end of this book:

1. Which of the following standards outlines the recommendations for computer security incident handling?

   A. NIST SP 800-62

   B. NIST SP 800-61

   C. NIST SP 800-53

   D. NIST SP 800-51

2. Which phase of incident handling is responsible for removing a threat?

   A. Detection and analysis

   B. Post-incident activity

   C. Containment, eradication, and recovery

   D. Preparation

3. Which security team is responsible for disclosing security vulnerability details and information to their nation's population, providing both security awareness and best practices?

   A. CERT

   B. PSIRT

   C. MSSP

   D. National CSIRT

4. Which tool can a security professional use to profile network traffic?

   A. RSPAN

   B. SPAN

   C. Nmap

   D. NetFlow

5. Which of the following is a requirement for healthcare...