Explaining containment techniques to a junior analyst

Assignment Help Computer Networking

Reference no: EM133958070

Assignment:

Detection and Containment Processes

1. What is a CoA matrix?

2. Which class of data criticality factor has been omitted from the following list? PII, PHI, SPI, IP, financial and corporate information.

3. You are explaining containment techniques to a junior analyst. What distinction can you make between isolation-based and segmentation-based containment?

4. Your SIEM has alerted you to ongoing scanning activity directed against workstations and servers. The host intrusion detection on each target has blocked access to the source IP automatically. What are your options and considerations for investigating this incident?

5. Which class of data criticality factor has been omitted from the following list? PII, PHI, SPI, IP, financial and corporate information.

6. Which class of data criticality factor has been omitted from the following list? PII, PHI, SPI, IP, financial and corporate information.

7. A technician attending a user who has been complaining about frequent lockups and log-offs with his machine has discovered a large cache of encrypted zipped files stored within the "System Volume Information" folder. What are your priorities for incident response and what tools will you use?

Reference no: EM133958070

Questions Cloud

Explain the trust management systems like spki and keynote : In one or one and half page about the please explain me What is trust management system SPKI, how it (Mechanism) works, advantages and disadvantage.

What is a maturity model : What is a maturity model? Which type of framework allows greater local factors to have more influence over security control selection?

Research capture techniques : One of the best features of Wireshark® is its ability to customize your capture approach to address the problem you are trying to find or solve.

What is phi : What secure communications methods are suitable for incident response? What is PHI?

Explaining containment techniques to a junior analyst : You are explaining containment techniques to a junior analyst. What distinction can you make between isolation-based and segmentation-based containment?

How can business establish a network that enables convenient : How can your business establish a network that enables convenient, rapid, and effective communication and information sharing across all of its locations?

Discuss how this may conflict with your right to privacy : Describe a privacy-preserving data analytics method that may allow bank to perform customer pattern analysis without infringing on customersright to privacy.

Why is this important as a security analyst : What are some parts of the HTTP header and why is this important as a security analyst?

Define the concepts of handling alerts : Define the concepts of handling alerts, analysing alerts and triaging alerts?

User Account

All Pages