FedVTE Cyber Risk Management for Technicians Assessment
Questions and Answers
In order to automate host characteristic monitoring you can compare baselines and
snapshots with syslog. - Correct AnswersFalse
The following should be taken into account when accepting the residual risk inherent in
the project. - Correct AnswersAll of the above
What is the high water mark for an information system? - Correct AnswersHighest
Potential Impact value assigned to each Security Objective (AIC) for all Security
Categories resident on the system and the overall classification of the system.
Which of the following describes NetScan Tools Pro? - Correct AnswersB. A powerful
command line packet analyzer
C. A tool that provides advanced network trace routing
D. A collection of Internet information gathering and network troubleshooting utilities
FIPS 200 is: - Correct AnswersA short document that describes the minimum security
requirements for information and information systems
Which risk comes from a failure of the controls to properly mitigate risk? - Correct
AnswersA. Inherent risk
C. Control Risk
D. All of the above
Open Source Security (OSSEC) is what? - Correct AnswersA host based security
system that monitors for changes
What tool would be best to automatically detect your network and construct a complete
and easy to view network map? - Correct AnswersLANsurveyor
Which NIST special publication is a guide for Applying the Risk Management
Framework to Federal Information Systems: A Security Life Cycle Approach? - Correct
AnswersNIST SP 800 37
Which of the following is a part of the Examine Method? - Correct AnswersInspecting
the physical security measures
