WGU C842 Chapter 3, Questions and answers, APPROVED. RATED A+

a-Ports that are closed or filtered Ports that are closed or filtered are not a common symptom of an information system security incident. However, specious log entries, and alarm generated by the IDS, modified files or folders, and receiving more than the expected number of packets are a common symptom of an information system security incident. - -"Which of the following is NOT a common symptom of an information System Security incident? a-Ports that are closed or filtered b-The IDS generates an alarm c-Suspicious log entries d-Modified files or folders e-Number of packets received are more than expected d-Risk Analysis Risk analysis is *NOT* the basic function of incident handling. The basic function of incident handling includes incident reporting, analysis and response. - -"Which of the following is NOT the basic function of incident handling? a-Incident response b-Incident analysis c-Incident reporting d-Risk analysis a-It has no value when it comes to saving the organization legal consequences is *NOT* true about incident handling Incident handling equips the organization with the procedures that can be followed in case of an incident, and also helps to determine the patterns in incidents to handle them more efficiently. Incident handling saves time, investment and effort and saves the organization from the legal consequences that they may have to face in the case of a severe incident. - -"Which of the following is NOT true about incident handling?