Review Questions

1. What is the purpose of an incident response plan?
2. Name three different categories of incident.
3. Name three different roles required to deal with an incident.
4. What should the help desk do when an incident has just been reported?
5. What is the purpose of an incident response exercise?
6. What is the first phase of the incident response process and what happens there?
7. What is the last phase of the incident response process?
8. What would happen if the last process of the incident response process was not carried out?
9. What is the order of volatility?
10. What is the first action you should take if your company experiences a web-based or remote attack?
11. What should you do if you find a USB flash drive in one of the servers?
12. What is the process of chain of custody and why would you investigate it?
13. What is the purpose of a legal hold?
14. What is the purpose of record time offset?
15. What...