A security analyst is researching an incident and uncovers several details that may link to other incidents. The security analyst wants to determine if other incidents are related to the current incident. Which of the following threat research methodologies would be MOST appropriate for the analyst to use? (A). Reputation data (B). CVSS score (C). Risk assessment (D). Behavioral analysis

A security analyst is researching an incident and uncovers several details that may link to other incidents. The security analyst wants to determine if other incidents are related to the current incident. Which of the following threat research methodologies would be MOST appropriate for the analyst to use? (A). Reputation data (B). CVSS score (C). Risk assessment (D). Behavioral analysis

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter6: Risk Management: Assessing Risk

Section: Chapter Questions

Problem 1E

See similar textbooks

Similar questions

There should be a list and description of four potential vulnerability intelligence sources. In your opinion, which of these is the most useful? Why?
Describe in your own words how response teams determine the severity of an incident in reference to the core security incident response team (CSIRT).
what are the similarities and differences between security knowledge framework(SKF) and Simple Risk in terms of vulnerability assessment from NIST Secure Software Development Framework.
Perform an abbreviated risk management study on your personal computer. Conduct an asset identification, threat identification, vulnerability appraisal, risk assessment, and risk mitigation. Under each category, list the elements that pertain to your system. What major vulnerabilities did you uncover? How can you mitigate these risks? What is your plan for securing your personal system? Are you going to implement the plan? Why or why not?
Answer Must Be Handwritten Being an IT personel how will you preapre security awareness plan, also expalin the awareness imporatnce in any organization?
There are two graphs presented from the CERT on reported incidents and vulnerabilities. Keep in mind the difference between an incident and vulnerability. While these charts are dated they still provide valuable trend information that continues to rise. Today, both security incidents and security vulnerabilities continue to rise for a variety of reasons. What reasons can you provide for the continuing upwards trend in the number of incidents reported? You should provide at least four (4) reasons with supporting data and reasoned arguments to support your answer. Good answers will provide facts, reasoned arguments and references that go beyond anecdotal information. Explain using facts, reasoned arguments and references that go beyond anecdotal information and link to sources. PLEASE ADD YOUR SOURCES! Please have clear writing as well! Thank you!
There are two graphs presented from the CERT on reported incidents and vulnerabilities. Keep in mind the difference between an incident and vulnerability. While these charts are dated they still provide valuable trend information that continues to rise. Today, both security incidents and security vulnerabilities continue to rise for a variety of reasons. What reasons can you provide for the continuing upwards trend in the number of incidents reported? You should provide at least four (4) reasons with supporting data and reasoned arguments to support your answer. Good answers will provide facts, reasoned arguments and references that go beyond anecdotal information. Explain using facts, reasoned arguments and references that go beyond anecdotal information and link sources.
Question G What is the relationship between vulnerability, threat and attack in computer security? Full explain this question and text typing work only We should answer our question within 2 hours takes more time then we will reduce Rating Dont ignore this line
There are four different kinds of vulnerability intelligence that must be considered. In your view, which would be the best? Why?
A__________is a systematic and methodical evaluation of the exposure of assets to attackers, forces of nature, or any other entity that is a potential harm. a. penetration test b. vulnerability scan c. vulnerability assessment d. risk appraisal (RAP)
How do you think the resources, capabilities/techniques, motivations, and aversion to risk differ between political activists and state-sponsored military cyberattackers? Fully address the questions in this discussion; provide valid rationale for your choices,
Vulnerability intelligence should come from four sources, which should be considered. According to your estimations, which one is the most advantageous? Why?