1.In a business impact analysis, which of the following best describes the recovery time objective (RTO)?

A. The average time it takes to repair a system

B. The target time to have a down system back up and running

C. The average length of time before a given piece of equipment will fail through normal use

D. The length of time a system can be down before the business cannot recover

2.In a business impact analysis, which of the following refers to how much data will be lost in a computer disaster?

A.MTTF

B.RPO

C.RTO

D.SLE

3. __________ is a common method for scoring system vulnerabilities.

A.Common Vulnerability Scoring System (CVSS)

B.Damage Potential, Reproducibility, Exploitability, Affected Users, and Discoverability (DREAD)

C, A disaster recovery plan (DRP)

D. The single loss expectancy (SLE)

4. A forensic expert sometimes uses specific measurements to describe an incident in order to analyze it. Which of the following is helpful in tracing the root cause of an incident and involves depiction of something resembling a fish head and fish bones?

A. Ishikawa diagram

B. Mean squared deviation

C, Mean percentage error

D. DREAD

5. NIST Special Publication 800-61 considers denial of service as:

A. all code that causes some harm, including computer viruses, Trojan horses, and spyware.

B. an attacker crafting packets to cause networks and/or computers to crash.

C. an exploit to gain access.

D. any use of the computer that violates company policies.

6. You are a cybersecurity technician. A computer worm has used open file shares to infect hundreds of systems in your company. What is this an example of?

A. A denial of service (DoS) attack

B. Unauthorized access

C. Malicious code

D. Inappropriate usage