212-89 Practice Test

212-89 Practice Test practice questions, page 6 of 7, with answer review and explanations.

Question 26

In the Control Analysis stage of the NIST's risk assessment methodology, technical and none technical control methods are classified into two categories. What are these two control categories?

  1. Preventive and Detective controls
  2. Detective and Disguised controls
  3. Predictive and Detective controls
  4. Preventive and predictive controls

Question 27

Which of the following incident recovery testing methods works by creating a mock disaster, like fire to identify the reaction of the procedures that are implemented to handle such situations?

  1. Scenario testing
  2. Facility testing
  3. Live walk-through testing
  4. Procedure testing

Question 28

An incident is analyzed for its nature, intensity and its effects on the network and systems. Which stage of the incident response and handling process involves auditing the system and network log files?

  1. Incident recording
  2. Reporting
  3. Containment
  4. Identification

Question 29

Which among the following CERTs is an Internet provider to higher education institutions and various other research institutions in the Netherlands and deals with all cases related to computer security incidents in which a customer is involved either as a victim or as a suspect?

  1. NET-CERT
  2. DFN-CERT
  3. Funet CERT
  4. SURFnet-CERT

Question 30

One of the main objectives of incident management is to prevent incidents and attacks by tightening the physical security of the system or infrastructure. According to CERT's incident management process, which stage focuses on implementing infrastructure improvements resulting from postmortem reviews or other process improvement mechanisms?

  1. Protection
  2. Preparation
  3. Detection
  4. Triage