Revision Questions

1. A security manager discovered an attempted SQL injection attack on an application. However, they could not determine whether it was successful. Who is in the best position to assess the possible impact of the attack?
   1. The application support team
   2. The incident response team
   3. The business process owner
   4. The network security team
2. What is the most important advantage of implementing a systematic and methodological incident management program?
   1. It reduces the cost of incident management
   2. It makes incident management more flexible
   3. It helps the responder gain experience
   4. It provides evidence of due diligence to support legal and liability claims
3. Once a virus incident has been resolved, the security manager will be most interested in knowing the:
   1. Configuration of the anti-malware software
   2. Other organizations impacted by the same virus
   3. Path of the virus's entry
   4. Author of the virus
4. What is the objective of reviewing the observations of staff involved in a disaster recovery...