212-89 Exam Question 21

A self-replicating malicious code that does not alter files but resides in active memory and duplicates itself,
spreads through the infected network automatically and takes advantage of file or information transport
features on the system to travel independently is called:
  • 212-89 Exam Question 22

    The type of relationship between CSIRT and its constituency have an impact on the services provided by the CSIRT. Identify the level of the authority that enables members of CSIRT to undertake any necessary actions on behalf of their constituency?
  • 212-89 Exam Question 23

    They type of attack that prevents the authorized users to access networks, systems, or applications by
    exhausting the network resources and sending illegal requests to an application is known as:
  • 212-89 Exam Question 24

    Which of the following incident recovery testing methods works by creating a mock disaster, like fire to identify
    the reaction of the procedures that are implemented to handle such situations?
  • 212-89 Exam Question 25

    Multiple component incidents consist of a combination of two or more attacks in a system. Which of the following is not a multiple component incident?