Section: INFORMATION SECURITY PROGRAM MANAGEMENT
Explanation:
Honeypots attract hackers away from sensitive systems and files. Since honeypots are closely monitored, the intrusion is more likely to be detected before significant damage is inflicted. Security baselines will only provide assurance that each platform meets minimum criteria. Penetration testing is not as effective and can only be performed sporadically. Vendor default settings are not effective.

Explanation/Reference:
Explanation:
Appropriate people need to be notified; however, one must first validate the incident. Containing the effects of the incident would be completed after validating the incident. Developing response strategies for systematic attacks should have already been developed prior to the occurrence of an incident.

Section: INFORMATION SECURITY PROGRAM MANAGEMENT
Explanation

Section: INFORMATION SECURITY PROGRAM MANAGEMENT