SNMP
Baseline
QOS
Six Steps of Incident Response
100

What does SNMP stand for? 

What is Simple Network Managment Protocol

100

What is a network baseline?

A report of the networks regular state of operation.

100

What does QoS stand for?

Quality of Serivce.

100

What is the first step in the incident response process?

The first step is preparation.

200

Which SNMP version introduced encryption?

SNMP Version 3.

200

Why is establishing a baseline important?

It can serve as a basis for future comparasion.

200

Name one method used to implement QoS.?

One method use is DiffServ (Differentiated Services). 

200

What is the purpose of the containment step?

It is to limit the damage caused by an incident. 

300

What is the key difference between SNMP v1 and v3?

Encryption.

300

How often should a network baseline be reviewed?


Each network requires its own schedule for documenting and reviewing baselines

300

Why is QoS important for VoIP applications?

QOS is important for VoIP because it minimizes issues like jitter and choppy voice quality.

300

Describe the eradication step?

Eradication involves finding the root cause of the problem and resolving it. 
400

What are the security features of SNMPv3

Authentication, validation, and encryption.  

400

What tools can be used to establish a network baseline?

For a small network you can use iPerf, or TamoSoft’s Throughput Test app. For a larger one you need a more sophisticated tool that tracks all KPI's. 

400

Explain the difference between traffic shaping and traffic policing.

Traffic shaping buffers less important traffic. Traffic Policing limits traffic by dropping less important packets.

400

Why is the lessons learned step important?

This is an important step because it can help prevent these incidents in the future. 

M
e
n
u