SNMP
Baseline
QoS
6 Steps of Incident Response
100

What does SNMP stand for?

Simple Network Management Protocol

100

What is a network baseline?

a snapshot, a collection of metrics about a network at a time of normal use

100

What does QoS stand for?

Quality of Service

100

What is the first step in the incident response process?

preparation

200

Which SNMP version introduced encryption?

version 3

200

Why is establishing a baseline important?

allows you to assess performance throughout the duration of a project

200

Name one method used to implement QoS.

traffic prioritization

200

What is the purpose of the containment step?

to limit the spread and impact of a security breach or threat once it has been detected

300

Describe a key difference between SNMP v1 and v3.

NMP version 3 supports authentication and encryption

300

How often should a network baseline be reviewed?

at least once a day

300

Why is QoS important for VoIP applications?

 to prevent issues like packet loss and latency, ensuring smooth communication during peak network usage, especially for video calls

300

Describe the eradication step.

the process of eliminating the root cause of the security incident with a high degree of confidence.

400

What are the security features of SNMP v3?

secure access to devices through a combination of authenticating and encrypting frames over the network

400

What tools can be used to establish a network baseline?

network monitoring platforms

400

Explain the difference between traffic shaping and traffic policing.

policing will drop the exceeding traffic and shaping will buffer it.

400

Why is the lessons learned step important?

helps avoid mistakes, optimize project performance, and ensure continuous improvement