Specialist - Infrastructure Security Exam (DES-9131) Practice Test

Questions # 1:

Rank order the relative severity of impact to an organization of each plan, where “1” signifies the most impact and “4” signifies the least impact.

Question # 1

Options:

Questions # 2:

Assume that a DDoS attack has been occurring for 72 minutes. What determines who talks to external

stakeholders?

Options:

Business Continuity Plan

Communication Plan

Business Impact Analysis

Incident Response Plan

Questions # 3:

What does a security benchmark help define?

Options:

Whether or not the organization should implement ISCM

The Baseline, or “as is” state

Which step of the DRP to execute first

What parts of the Baseline are appropriate

Questions # 4:

Which NIST Cybersecurity Framework function should be executed before any others?

Options:

Respond

Protect

Recover

Identify

Questions # 5:

When should event analysis be performed?

Options:

Only when requested by an auditor

Routinely for all events collected on a mission critical system

Only at the discretion of an authorized security analyst

After an event is triggered by the detection system

Questions # 6:

A security engineer is responsible for monitoring company software, firmware, system OS, and applications for known vulnerabilities. How should they stay current on exploits and information security?

Options:

Implement security awareness training

Update company policies and procedures

Revise vulnerability management plan

Subscribe to security mailing lists

Questions # 7:

What is part of the Pre-Recovery phase?

Options:

Backup validation

Validate functionality

Restore assets

Monitor assets

Questions # 8:

What is the main goal of a gap analysis in the Identify function?

Options:

Determine security controls to improve security measures

Determine actions required to get from the current profile state to the target profile state

Identify gaps between Cybersecurity Framework and Cyber Resilient Lifecycle pertaining to that function

Identify business process gaps to improve business efficiency

Questions # 9:

What should an organization use to effectively mitigate against password sharing to prevent unauthorized

access to systems?

Options:

Access through a ticketing system

Frequent password resets

Strong password requirements

Two factor authentication

Questions # 10:

You have been tasked with documenting mission critical procedures of an organization that need to be

sustained through a significant disruption.

What document would you develop?

Options:

Business Continuity Plan

Business Impact Assessment

Risk Analysis Report

Regression Test Plan

Viewing page 1 out of 2 pages

Viewing questions 1-10 out of questions

Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Pass the EMC DECS DES-9131 Questions and answers with ExamsMirror

Exam DES-9131 Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES