CIS 462 Final Exam (2 Set) CIS 462 Final Exam (2 Set) | Page 4

• Question 27 organization? FISMA requires federal agencies to report major incidents to which • Question 28 During which phase of incident response do IRT members stop the attack and gather evidence? • Question 29 According to the Payment Card Industry Data Security Standard (PCI DSS), what is classified as an incident? • Question 30 In a business classification scheme, which classification refers to routine communications within the organization? • Question 31 Regarding data classification, what does "declassification" mean? • Question 32 What is the general retention period of regulated documents? • Question 33 conducting a BCP? What is considered to be a natural extension of the BIA when • Question 34 data? Which of the following is not a primary reason a business classifies • Question 35 critical data? In a business classification scheme, which classification refers to mission- • Question 36 What is a security benefit of routinely deleting electronic documents that are no longer required for legal or business reasons?