Incident Response Procedures for Data Breaches
Exam 2025 | All Questions and Correct Answers |
Already Graded A+ | Verified Answers | Just
Released
What should be done immediately if encryption keys are compromised? ---------
CORRECT ANSWER-----------------Suspend access to all data related to the
encryption keys, generate a new set of keys, decrypt all data that used the old
keys, re-encrypt using the new keys, and destroy the old keys.
What is the first step in responding to a User ID/Password compromise? ---------
CORRECT ANSWER-----------------Suspend or revoke UserIDs and passwords of
responsible individuals pending investigation.
What actions should be taken if credit card data is compromised? ---------CORRECT
ANSWER-----------------Notify appropriate authorities and institute procedures to
minimize impact to cardholders.
What is a critical step in the hardening procedure after a breach? ---------CORRECT
ANSWER-----------------Review policies and procedures to ensure compliance and
update any that are found lacking.
,What should be done if a breach occurred with employee assistance? ---------
CORRECT ANSWER-----------------Design a protection plan around the incident
investigation.
What should be done to prevent password cracking attempts? ---------CORRECT
ANSWER-----------------Identify the source of attack, block the IP, limit password
attempts, and notify targeted users to change their passwords.
What is the purpose of updating and applying patches after a breach? ---------
CORRECT ANSWER-----------------To address vulnerabilities in hardware or software
that may have precipitated the breach.
What should be done if a responsible employee is found to have compromised
sensitive data? ---------CORRECT ANSWER-----------------They may be subject to
disciplinary policies up to and including termination of employment.
What should be done if a service is under attack? ---------CORRECT ANSWER---------
--------Determine if the service is necessary; disable it if not, or restrict access
through VPN if it is necessary.
How should organizations respond to theft of UserIDs/Passwords? ---------
CORRECT ANSWER-----------------Change global passwords and identify the specific
material that was compromised.
, What is the recommended action if a user's account is targeted during a password
cracking attempt? ---------CORRECT ANSWER-----------------Notify the user of the
attempts and request them to change their password regularly until the attack
subsides.
What should be included in the recovery path after a data breach? ---------
CORRECT ANSWER-----------------Involvement of associated law enforcement
agencies and notification of all relevant parties affected by the loss.
What is the significance of determining the point and specific type of breach? -----
----CORRECT ANSWER-----------------It helps in identifying the vulnerabilities and
the necessary steps to mitigate future risks.
What should be done to ensure that passwords are secure against dictionary
attacks? ---------CORRECT ANSWER-----------------Verify that passwords are not
easily guessable or dictionary-crackable.
What is a potential consequence for employees involved in a data breach? ---------
CORRECT ANSWER-----------------They may face termination of employment and
prosecution to recover material or financial assets.
Exam 2025 | All Questions and Correct Answers |
Already Graded A+ | Verified Answers | Just
Released
What should be done immediately if encryption keys are compromised? ---------
CORRECT ANSWER-----------------Suspend access to all data related to the
encryption keys, generate a new set of keys, decrypt all data that used the old
keys, re-encrypt using the new keys, and destroy the old keys.
What is the first step in responding to a User ID/Password compromise? ---------
CORRECT ANSWER-----------------Suspend or revoke UserIDs and passwords of
responsible individuals pending investigation.
What actions should be taken if credit card data is compromised? ---------CORRECT
ANSWER-----------------Notify appropriate authorities and institute procedures to
minimize impact to cardholders.
What is a critical step in the hardening procedure after a breach? ---------CORRECT
ANSWER-----------------Review policies and procedures to ensure compliance and
update any that are found lacking.
,What should be done if a breach occurred with employee assistance? ---------
CORRECT ANSWER-----------------Design a protection plan around the incident
investigation.
What should be done to prevent password cracking attempts? ---------CORRECT
ANSWER-----------------Identify the source of attack, block the IP, limit password
attempts, and notify targeted users to change their passwords.
What is the purpose of updating and applying patches after a breach? ---------
CORRECT ANSWER-----------------To address vulnerabilities in hardware or software
that may have precipitated the breach.
What should be done if a responsible employee is found to have compromised
sensitive data? ---------CORRECT ANSWER-----------------They may be subject to
disciplinary policies up to and including termination of employment.
What should be done if a service is under attack? ---------CORRECT ANSWER---------
--------Determine if the service is necessary; disable it if not, or restrict access
through VPN if it is necessary.
How should organizations respond to theft of UserIDs/Passwords? ---------
CORRECT ANSWER-----------------Change global passwords and identify the specific
material that was compromised.
, What is the recommended action if a user's account is targeted during a password
cracking attempt? ---------CORRECT ANSWER-----------------Notify the user of the
attempts and request them to change their password regularly until the attack
subsides.
What should be included in the recovery path after a data breach? ---------
CORRECT ANSWER-----------------Involvement of associated law enforcement
agencies and notification of all relevant parties affected by the loss.
What is the significance of determining the point and specific type of breach? -----
----CORRECT ANSWER-----------------It helps in identifying the vulnerabilities and
the necessary steps to mitigate future risks.
What should be done to ensure that passwords are secure against dictionary
attacks? ---------CORRECT ANSWER-----------------Verify that passwords are not
easily guessable or dictionary-crackable.
What is a potential consequence for employees involved in a data breach? ---------
CORRECT ANSWER-----------------They may face termination of employment and
prosecution to recover material or financial assets.
