UNIT-3 Information Security Incident

Management & Data Backup

1. Define Incident Response. What are the impacts of information security
Incidents?
2. What are the goals and signs of Incident Response?
3. What is the need for Incident Response and Give the sources of Incident
Information.
4. Write short notes on Incident Response process.
5. What are the Roles and Responsibilities of Incident Response Team?
6. Write short notes on various types of Backup.
7. What are the features of a good Data Backup policy?
8. Define Data Backup and what the purpose of Data Backup is?
9. What are the different types of storage devices used in Data backup explain
Them.
10. Explain Backup procedure.

UNIT-4 Log Correlation

1. Define Log and Log Management.

2. Explain Log Management Functions and Challenges.

3. Explain how to configure Windows Log event.

4. Explain Log analysis and Response.

5. Explain Log Management process.

6. Write short notes on IIS Log files.

7. Write short notes on Log Management Infrastructure.

8. List all the key concepts associated with Log Management.

9. Explain Time synchronization with NTP and NIST.

UNIT-5 Handling Network Security Incidents:
Handling Malicious code Incidents

1.Define probe. Write classification of probes based on activities. Explain modes

of probes.

2. Explain how to handle specific types of incidents.

3. Explain handling of Denial of Service(DoS)incidents.

4. Explain handling of Unauthorized Access incidents.

5. Explain handling of Inappropriate Usage incidents.

6.List some malicious actions and their respective indicators of unauthorized

Access incidents.

7. Explain handling of Multiple Component incidents.

8. Write short notes on Malicious code incidents.

9. Write short notes on detecting Malicious code. (Precursor& response)

10. Give three malicious actions and their indicators of malicious code incidents.

11. Write A Short Notes On Network Reconnaissance INCIDENTS

12. Write a short notes detecting DoS ATTACKS.