CIS 359 Midterm Exam Set 1 (2) CIS 359 Midterm Exam Set 1 (2) | Page 2

One way to build and maintain staff skills is to develop incident-handling ____ and have the
team members discuss how they would handle them.
Question 5
Giving the IR team the responsibility for ____ is generally not recommended.
Question 6
When an organization completely outsources its IR work, typically to an on-site contractor, it is
called a(n) ____ model.
Question 7
The focus during a(n) ____ is on learning what worked, what didn’t, and where communications
and response procedures may have failed.
Question 8
Those services undertaken to prepare the organization or the CSIRT constituents to protect and
secure systems in anticipation of problems, attacks, or other events are called ____.
Question 9