The open source TCP/IP network intrusion prevention and detection system (IDS/IPS), uses a rule-driven language, performs real-time traffic analysis and packet logging is known as:

According to US-CERT; if an agency is unable to successfully mitigate a DOS attack it must be reported within:

Which of the following incident recovery testing methods works by creating a mock disaster, like fire to identify
the reaction of the procedures that are implemented to handle such situations?

Which of the following is NOT one of the common techniques used to detect Insider threats:

Bit stream image copy of the digital evidence must be performed in order to: