Exam 1: EC-Council Certified Incident Handler

Risk appetite directly affects what part of a vulnerability management program?

A Security Operations Centre (SOC) manager is informed that a database containing highly sensitive corporate strategy information is under attack. Information has been stolen and the database server was disconnected. Who must be informed of this incident?

When managing an Information Security Program, which of the following is of MOST importance in order to influence the culture of an organization?

When dealing with a risk management process, asset classification is important because it will impact the overall:

The FIRST step in establishing a security governance program is to?

The alerting, monitoring and life-cycle management of security related events is typically handled by the

Within an organization's vulnerability management program, who has the responsibility to implement remediation actions?

Information security policies should be reviewed:

Quantitative Risk Assessments have the following advantages over qualitative risk assessments:

You have a system with 2 identified risks. You determine the probability of one risk occurring is higher than the

Which of the following is of MOST importance when security leaders of an organization are required to align security to influence the culture of an organization?

Which of the following intellectual Property components is focused on maintaining brand recognition?

Which of the following international standards can be BEST used to define a Risk Management process in an organization?

What is the main purpose of the Incident Response Team?

A security manager has created a risk program. Which of the following is a critical part of ensuring the program is successful?

What is the BEST way to achieve on-going compliance monitoring in an organization?

When dealing with Security Incident Response procedures, which of the following steps come FIRST when reacting to an incident?

Ensuring that the actions of a set of people, applications and systems follow the organization's rules is BEST described as:

Risk that remains after risk mitigation is known as

You have recently drafted a revised information security policy. From whom should you seek endorsement in order to have the GREATEST chance for adoption and implementation throughout the entire organization?