CIS 359 STUDY Extraordinary Success /cis359study.com CIS 359 STUDY Extraordinary Success /cis359study.c | Page 17

Question 2
The first group to communicate the CSIRT’s vision and operational
plan is the managerial team or individual serving as the ____.
Question 3
Those services performed in response to a request or a defined event
such as a help desk alert are called ____.
Question 4
One way to build and maintain staff skills is to develop incident-
handling ____ and have the team members discuss how they would
handle them.
Question 5
Giving the IR team the responsibility for ____ is generally not
recommended.
Question 6
When an organization completely outsources its IR work, typically to
an on-site contractor, it is called a(n) ____ model.
Question 7
The focus during a(n) ____ is on learning what worked, what didn’t,
and where communications and response procedures may have failed.
Question 8
Those services undertaken to prepare the organization or the CSIRT
constituents to protect and secure systems in anticipation of problems,
attacks, or other events are called ____.
Question 9
____ are closely monitored network decoys serving that can distract
adversaries from more valuable machines on a network; can provide