CIS 359 Midterm Exam Set 1 (2) CIS 359 Midterm Exam Set 1 (2) | Page 8

Incident analysis resources include network diagrams and lists of ____, such as database
servers.
Question 36
The U.S. National Institute of Standards and Technology recommends a set of tools for the
CSIRT including incident reporting mechanisms with which users can report suspected
incidents. At least one of these mechanisms should permit people to report incidents ____.
Question 37
A(n) ____ is a CSIRT team member, other than the team leader, who is currently performing the
responsibilities of the team leader in scanning the organization’s information infrastructure for
signs of an incident.
Question 38
____ is the process of systematically examining information assets for evidentiary material that
can provide insight into how an incident transpired.
Question 39
A favorite pastime of information security professionals is ____, which is a simulation of attack
and defense activities using realistic networks and information systems.
Question 40