FINIAL

RESPONSIBILITIES

100

Who responsibility is it to report lost/stolen flash drive?

Lesson 4.1.1

User responsibilities 

200

_{T/F 48 hours is the timeframe which must be set to detect multiple attempts to use removable media within DLP? Lesson 4.1.1}

True

300

Which personnel are responsible for monitoring sites, or site groups to ensure the security posture of the networks are being maintained
Lesson 4.1.2

Staff Users

400

_{What is the periodicity required to maintain antivirus definitions?}

_{Lesson 4.1.11}

_{7 days}

500

_{What application shows an attack that generated an alert including a description of the attack, the user/client computer where the attack occurred, the attack, and time/date of intercept?}

_{Lesson 4.1.10}

_{Intrusion detection alerts}

MANAGEMENT

100

What confidentiality impact level can cause severe or catastrophic adverse effect on organizational operations, assets, individuals, organizations, or the national security interests of the U.S.

Lesson 4.1.2

High

200

Which activity must ISSMs track and report to leadership to ensure proper reports

Lesson 4.1.2

CTO Compliance 

300

_{Locked out status occurs on a system when you are unable to verify what type of updates?}

_{Lesson 4.1.11}

Antivirus signatures

400

_{DOD PKI supports escrow and recovery of private keys associated with encryption certificates. This is consider what type of service?}

_{Lesson 5.1.1}

_{Key recovery}

500

_{What procedures ensures that the reporting, identification, investigation of violations of DTA are documented?}

_{Lesson 4.1.9}

_{Training and incident handling}

PROGRAM & POLICY

100

_{What is the purpose of Patch Management Process?}

_{Lesson 4.1.5}

_{systematic notification, identification, deployment, installation, and verification of operating system and application software code revision}

200

_{Defined this process, user authentication to the network using DOD PKI certificates on a hardware token}

_{Lesson 5.1.2}

CLO

300

^{What broad scope of activities designed IS plan should be utilized to sustain and recover critical system services following an emergency event}

^{Lesson 4.1.8}

IS contingency planning

400

T/F Risk assessment addresses the likelihood and magnitude of harm resulting from the unauthorized access, use, disclosure, disruption, modification, or destruction of the IS

Lesson 4.1.5

True 

500

Assist with the handling of incidents and provides fixes to mitigate the operational and/or technical impact of an incident is what designed action?

Lesson 6.1.1

Technical reporting

THREATS

100

^{what NAVY preferred method is used for destruction both classified and unclassified hard drives?}

^{Lesson 4.1.7}

_{Shipping to the NSA}

200

^{NESSUS is a component of what scanning software?}

^{Lesson 4.1.4}

ACAS

300

_{What tier includes buses, posts, camps, and stations managing and controlling information networks, ISs, and services, either deployed or fixed at DoD installations?}

_{Lesson 6.1.1}

Tier III

400

_{What is purpose of Host-based application blocking}

_{Lesson 4.1.10}

_{system prevents applications from executing pieces of code and from crossing in to the memory space of another running program}

500

_{Inspects user actions regarding sensitive content in their work environment is what layer of defense?}

_{Lesson 4.1.6}

Data loss prevention

AUTHENICATION

100

_{Which area is jeopardized by failure to comply with vulnerability reporting?}

_{Lesson 4.1.3}

ATO

200

_{eMASS consume outputs from external vendor scanning tools and maps results to information systems through what application?}

_{Lesson 7.1.1}

Asset manager

300

_{Describe Risk Management}

_{Lesson 4.1.8}

_{applies framework across all continuity efforts to identify and assess potential hazards, determine what levels of risk are acceptable, and prioritize and allocate resources among organizations}

400

_{T/F. MAC Address must be included in the Systems Security Plan diagrams.}

_{Lesson 7.1.2}

_False

500

_{What is the PURPOSE of SOVT}

_{Lesson 4.1.4}

^{To ensure asset compliance, commands must make sure system baselines are maintained and that they comply with SPAWAR baseline instructions contained in the}