CIS 359 STUDY Great Stories/cis359study.com CIS 359 STUDY Great Stories/cis359study.com | Page 21

•
Question 22
Once the incident has been contained, and all signs of the
incident removed, the ____ phase begins.
•
Question 23
A ____ is a description of the disasters that may befall an
organization, along with information on their probability of occurrence,
a brief description of the organization’s actions to prepare for that
disaster, and the best case, worst case, and most likely case outcomes of
the disaster.
•
Question 24
____ are highly probable when infected machines are brought
back online or when other infected computers that may have been offline
at the time of the attack are brought back up.
•
Question 25