ISSM JEOPARDY FINAL Ver. A

USB Violations / VM Policy

100

_{This person is responsible to report lost/stolen flash drives.}

_{Lesson 4.1.1}

Who are Users

200

_{Timeframe set to detect multiple attempts to use removable media within DLP}

_{Lesson 4.1.1}

What is 48 hours

300

Personnel responsible for monitoring sites to ensure the security posture of the networks are being maintained

Lesson 4.1.2

Who are Staff Users

400

_{Confidentiality impact level that can cause severe or catastrophic adverse effect on organizational operations or the national security interests of the U.S.}

_{Lesson 4.1.2}

What is High

500

_{Activity used by ISSMs to track and report compliance to leadership}

_{Lesson 4.1.2}

What is CTO Compliance

PKI Requirements / Management

100

_{This is the purpose of Host-based application blocking}

_{Lesson 4.1.10}

What is to prevent applications from executing pieces of code and from crossing in to the memory space of another running program

200

_{This application shows an attack that generated an alert including a description of the attack and time/date of intercept?}

_{Lesson 4.1.10}

What is Intrusion Detection Alerts

300

_{Locked out status occurs on a system when you are unable to verify what type of updates}

_{Lesson 4.1.11}

What is Antivirus signatures

400

_{This DOD PKI service supports escrow and recovery of private keys associated with encryption certificates}

_{Lesson 5.1.1}

_{What is Key recovery}

500

_{This ensures that the reporting, identification, investigation of violations of DTA are documented}

_{Lesson 4.1.9}

_{What is training and incident handling}

Asset Compliance / Vulnerabilities

100

_{This is the purpose of the Patch Management Process}

_{Lesson 4.1.5}

_{What is the systematic notification, identification, deployment, installation, and verification of operating system and application software code revision}

200

_{This framework applies across all continuity efforts to identify and assess potential hazards and prioritize and allocate resources among organizations}

_{Lesson 4.1.8}

What is Risk Management

300

NESSUS is a component of this scanning software

Lesson 4.1.4

What is ACAS

400

_{This addresses the likelihood and magnitude of harm resulting from the unauthorized access or destruction of the IS}

_{Lesson 4.1.5}

What is Risk Assessment 

500

_{Commands must make sure system baselines are maintained and that they comply with SPAWAR baseline instructions contained in this document}

_{Lesson 4.1.4}

What is a SOVT

Incident Handling / Enforcing Policies

100

^{what NAVY preferred method is used for destruction both classified and unclassified hard drives?}

^{Lesson 4.1.7}

_{Shipping to the NSA}

200

_{This broad scope of activities designed IS plan should be utilized to sustain and recover critical system services following an emergency event}

_{Lesson 4.1.8}

What is IS Contingency Planning

300

_{What tier includes buses, posts, camps, and stations managing and controlling information networks, ISs, and services, either deployed or fixed at DoD installations?}

_{Lesson 6.1.1}

Tier III

400

_{This assists with the handling of incidents and provides fixes to mitigate the operational and/or technical impact of an incident}

_{Lesson 6.1.1}

What is Technical reporting

500

_{Inspects user actions regarding sensitive content in their work environment is what layer of defense?}

_{Lesson 4.1.6}

Data loss prevention

PKI Management / Network Tasks

100

_{Which area is jeopardized by failure to comply with vulnerability reporting?}

_{Lesson 4.1.3}

ATO

200

_{eMASS consume outputs from external vendor scanning tools and maps results to information systems through what application?}

_{Lesson 7.1.1}

Asset manager

300

_{This is the periodicity required to maintain antivirus definitions}

_{Lesson 4.1.11}

What is 7 days

400

_{T/F. MAC Address must be included in the Systems Security Plan diagrams.}

_{Lesson 7.1.2}

_False

500

_{This process is defined as user authentication to the network using DOD PKI certificates on a hardware token}

_{Lesson 5.1.2}

What is CLO