Online Access Free DES-9131 Practice Test

What does a security benchmark help define?

• A.Whether or not the organization should implement ISCM
• B.The Baseline, or "as is" state
• C.Which step of the DRP to execute first
• D.What parts of the Baseline are appropriate

A security engineer is responsible for monitoring company software, firmware, system OS, and applications for known vulnerabilities. How should they stay current on exploits and information security?

• A.Implement security awareness training
• B.Update company policies and procedures
• C.Revise vulnerability management plan
• D.Subscribe to security mailing lists

What determines the technical controls used to restrict access to USB devices and help prevent their use within a company?

• A.Detect use of the USB devices and report users
• B.Block use of the USB devices for all employees
• C.Acceptable use policy in the employee HR on-boarding training
• D.Written security policy prohibiting the use of the USB devices

Match the security event to its description.

Correct Answer:

The CSIRT team is following the existing recovery plans on non-production systems in a PRE-BREACH scenario. This action is being executed in which function?

• A.Respond
• B.Protect
• C.Recover
• D.Identify