CIS 359 STUDY Great Stories/cis359study.com CIS 359 STUDY Great Stories/cis359study.com | Page 37

A(n) ____ is a detailed examination of the events that occurred, from
first detection of an incident to final recovery.
Question 35
Incident analysis resources include network diagrams and lists of ____,
such as database servers.
Question 36
The U.S. National Institute of Standards and Technology recommends a
set of tools for the CSIRT including incident reporting mechanisms with
which users can report suspected incidents. At least one of these
mechanisms should permit people to report incidents ____.
Question 37
A(n) ____ is a CSIRT team member, other than the team leader, who is
currently performing the responsibilities of the team leader in scanning
the organization’s information infrastructure for signs of an incident.
Question 38