Online Access Free D-CSF-SC-23 Practice Test

The network security team in your company has discovered a threat that leaked partial data on a compromised file server that handles sensitive information. Containment must be initiated and addresses by the CSIRT. Service disruption is not a concern because this server is used only to store files and does not hold any critical workload.
Your company security policy required that all forensic information must be preserved.
Which actions should you take to stop data leakage and comply with requirements of the company security policy?

• A.Disconnect the file server from the network to stop data leakage and keep it powered on for further analysis.
• B.Shut down the server to stop the data leakage and power it up only for further forensic analysis.
• C.Create a firewall rule to block all external connections for this file server and keep it powered on for further analysis.
• D.Restart the server to purge all malicious connections and keep it powered on for further analysis.

What could be considered a set of cybersecurity activities, desired outcomes, and applicable references that are common across critical infrastructure sectors and align to five concurrent and continuous functions?

• A.Governance
• B.Baseline
• C.Profile
• D.Core

Your data center uses a diesel generator as backup for two different power grids provided by your regional power company. During a period of unprecedented heat, you experience brown-outs on both grids simultaneously.
The diesel generator starts up but only runs for two minutes before it also shuts down, leaving your entire data center down until grid power can be restored. Further inspection reveals a clogged fuel filter.
Failing to schedule preventive service for the backup generator is a failure in which function?

• A.Respond
• B.Protect
• C.Recover
• D.Detect

What identifies the value of data to an organization so that confidentiality and integrity can be protected and intelligent data handling decisions can be made?

• A.Data security
• B.Data analysis
• C.Data capital
• D.Data classification

What is a consideration when performing data collection in Information Security Continuous Monitoring?

• A.Collection is used only for compliance requirements.
• B.Data is best captured as it traverses the network.
• C.The more data collected, the better chances to catch an anomaly.
• D.Data collection efficiency is increased through automation.