Question 1

At what type of recovery site would computers,devices,and connectivity necessary to rebuilt a network exist,and all are appropriately configured,updated,and connected to match your network's current state?
A)cold site
B)warm site
C)temp site
D)hot site

Accepted Answer

A hot site is a complete duplicate of the original production site with all necessary equipment, devices, and connectivity already in place and configured to match the network's current state. In the event of a disaster, the hot site can be quickly activated, and the network can be rebuilt with minimal downtime or data loss.

Question 2

What should be the first step of a response policy?
A)Determine if escalation is necessary
B)Secure the area
C)Document the scene
D)Monitor evidence and data collection

Accepted Answer

The first step of a response policy should be to determine if escalation is necessary. This will help to ensure that the appropriate level of response is taken and that resources are not wasted on incidents that can be handled at a lower level.

Question 3

Which of the following is NOT a step that should be taken as part of a response policy?
A)Secure the area and disconnect devices from the network
B)Create documentation detailing the scene
C)Attempt to access files to determine if they are compromised
D)Protect the chain of custody of evidence

Accepted Answer

Attempting to access files during a response can make the situation worse, as it could potentially spread the infection or damage the evidence. The other options are important steps in a response policy.

Question 4

In order to provide access to a historian by personnel working on the corporate network that are not authorized to work on the ICS network,where should the historian be placed?
A)DMZ
B)corporate network
C)Internet
D)private network

Accepted Answer

Placing the historian in the DMZ would provide a secure middle ground between the corporate and ICS network, allowing authorized personnel on the corporate network to access the historian without compromising the security of the ICS network. It also allows for additional security measures such as firewalls and intrusion detection systems to be implemented to protect both networks.

Question 5

Explain what an RFP is.

Accepted Answer

The answer of Explain what an RFP is....

Question 6

What team member role focuses on only one thing: solving the problem as quickly as possible?
A)dispatcher
B)manager
C)technical support specialist
D)public relations specialist

Accepted Answer

The role of a technical support specialist is to quickly and efficiently solve technical problems for customers or team members. They are focused on finding solutions as quickly as possible to minimize any downtime or inconvenience. Dispatchers may also prioritize fast problem-solving, but they are generally responsible for coordinating resources and deploying them to handle issues as they arise. Managers and public relations specialists may be involved in problem-solving, but they also have other responsibilities that require them to balance multiple priorities.

Question 7

When performing inventory on software packages,which of the following is not something that should be inventoried?
A)version number
B)vendor
C)licensing
D)proprietary source code

Accepted Answer

Proprietary source code is not something that should be inventoried as it is not a tangible asset that can be counted as part of an inventory. The version number, vendor, and licensing details of software packages are all important information that should be included in an inventory to ensure proper management and compliance.

Question 8

What is a historian?
A)A centralized database of collected and analyzed data and control activities.
B)A server that collects and stores raw data.
C)A supervisory computer or server,which can control the physical system.
D)Computers,including hardware and software,that people use to monitor and manage the physical systems.

Accepted Answer

The answer of What is a historian?
A)A centralized database of...

Question 9

What team member role,if necessary,learns about the situation and the response and then acts as official spokesperson for the organization to the public or other interested parties?
A)dispatcher
B)manager
C)technical support specialist
D)public relations specialist

Accepted Answer

This is the role of a public relations specialist who is responsible for communicating with the public and handling any issues that may arise. They are trained to handle crisis situations and serve as the official spokesperson for the organization. A dispatcher, manager, or technical support specialist may not have the necessary skills or training to effectively communicate with the public.

Question 10

What type of physical security solution involves a device that scans an individual's unique physical characteristics?
A)proximity access
B)biorecognition access
C)AIT access
D)keypad access

Accepted Answer

Biorecognition access involves a device that scans an individual's unique physical characteristics such as fingerprints, facial recognition, or RFID implants to grant access. Proximity access uses tags or cards to grant access, AIT (Advanced Imaging Technology) access involves advanced imaging technology for scanning objects, and keypad access involves entering a code on a keypad to grant access.

Question 11

The time period in which a change can be implemented is known as what option below?
A)change period
B)maintenance window
C)work order time
D)service affecting work interval

Accepted Answer

The maintenance window is a specific time period in which changes can be made to a system or application without causing disruptions to users or customers. It is usually scheduled during off-peak hours or times of low usage to minimize the impact of any service affecting work.

Question 12

What are three different changes that you might be required to perform on existing software?

Accepted Answer

The answer of What are three different changes that you...

Question 13

Describe a service level agreement.

Accepted Answer

The answer of Describe a service level agreement....

Question 14

Explain what a memorandum of understanding (MOU)is.

Accepted Answer

The answer of Explain what a memorandum of understanding (MOU)is....

Question 15

Which type of disaster recovery site is a place where the computers,devices,and connectivity necessary to rebuild a network exist,but they are not appropriately configured,updated,or connected?
A)cold site
B)temp site
C)warm site
D)hot site

Accepted Answer

A cold site is a type of disaster recovery site that has the necessary physical space and facilities but lacks the pre-configured hardware, software, and connectivity required for immediate operation. It requires time and effort to set up and become operational after a disaster.

Question 16

If a destructive program is running that might be destroying evidence,what should be done?
A)Perform an immediate full backup
B)Attempt to end the process
C)Pull the power cable
D)Record the destruction using a video capture of the screen

Accepted Answer

Pulling the power cable immediately stops the destructive program, preventing further damage or loss of evidence.

Question 17

What should be in a disaster recovery plan that relates to computers?

Accepted Answer

The answer of What should be in a disaster recovery...

Question 18

Upon receipt of what type of notification is a company required to activate a defensible policy for the preservation of relevant data?
A)subpoena
B)legal hold
C)discovery request
D)chain of custody notice

Accepted Answer

A legal hold notification requires a company to activate a defensible policy for the preservation of relevant data. A subpoena, discovery request, and chain of custody notice may also require data preservation, but they are specific legal requests rather than a general notification for data preservation.

Question 19

What type of device can be used to erase contents of a hard drive using a magnetic field?
A)electromagnetic resonance chamber
B)degausser
C)targeted magneto-wipe
D)polarized magnet

Accepted Answer

A degausser is a device that uses a high-powered magnet to erase the contents of a hard drive by disrupting the magnetic field that stores the data. It is a common method used by organizations to ensure that sensitive information is completely wiped from their old hard drives before disposal or recycling.

Question 20

Which type of recovery site is a place where computers,devices,and connectivity necessary to rebuild a network exist,with some pieces appropriately configured,updated,or connected?
A)cold site
B)warm site
C)hot site
D)temp site

Accepted Answer

A warm site is a recovery site that has some necessary equipment and configurations in place, making it faster to rebuild a network than a cold site. However, it is not fully operational like a hot site. Therefore, a warm site seems to be the most appropriate choice for the given scenario.

Quiz 12: Industrial and Enterprise Networking

At what type of recovery site would computers,devices,and connectivity necessary to rebuilt a network exist,and all are appropriately configured,updated,and connected to match your network's current state?

What should be the first step of a response policy?

Which of the following is NOT a step that should be taken as part of a response policy?

In order to provide access to a historian by personnel working on the corporate network that are not authorized to work on the ICS network,where should the historian be placed?

Explain what an RFP is.

What team member role focuses on only one thing: solving the problem as quickly as possible?

When performing inventory on software packages,which of the following is not something that should be inventoried?

What is a historian?

What team member role,if necessary,learns about the situation and the response and then acts as official spokesperson for the organization to the public or other interested parties?

What type of physical security solution involves a device that scans an individual's unique physical characteristics?

The time period in which a change can be implemented is known as what option below?

What are three different changes that you might be required to perform on existing software?

Describe a service level agreement.

Explain what a memorandum of understanding (MOU)is.

Which type of disaster recovery site is a place where the computers,devices,and connectivity necessary to rebuild a network exist,but they are not appropriately configured,updated,or connected?

If a destructive program is running that might be destroying evidence,what should be done?

What should be in a disaster recovery plan that relates to computers?

Upon receipt of what type of notification is a company required to activate a defensible policy for the preservation of relevant data?

What type of device can be used to erase contents of a hard drive using a magnetic field?

Which type of recovery site is a place where computers,devices,and connectivity necessary to rebuild a network exist,with some pieces appropriately configured,updated,or connected?