Sscp Auditing And Monitoring

Front 1

Why does security tend to deteriorate during operations?

Back 1

users find ways to circumvent security

Front 2

What two methods are used to maintain operational assurance?

Back 2

system audits and monitoring

Front 3

Why is time synchronization across systems important for auditing?

Back 3

in order to re-construct events during an audit

Front 4

What are the four steps to set up an audit trail?

Back 4

check the mechanisms needed; write a rule set matrix; turn on exception logs; turn on violation logs

Front 5

What are the nine phases in a typical audit?

Back 5

review security policies; develop a security matrix; review existing security information; review audit capacity and use; check patches and updates; run analysis tools and check for vulnerabilities; correlate all information; write a report; and make recommendations

Front 6

What are the four types of audit tools?

Back 6

discovery tools; documentation tools; audit reduction tools; and analysis tools

Front 7

What are the three types of monitoring?

Back 7

network monitoring, security monitoring, and keystroke monitoring

Front 8

What are the four phases of incident response?

Back 8

preparation, detection, handling, and post-incident response

Front 9

What sort of activities are covered by the preparation phase of incident response?

Back 9

establishing and training a response team, acquiring tools, and performing risk analysis

Front 10

What phase of incident response is usually the most difficult?

Back 10

detection