フリー問題

Designing Cisco Security Infrastructure v1.0 のフリー問題 12 / 20 問目

問題文

A reviewer has to write down why the handling of what is gathered during an incident is bound to written procedure, and what has to happen when a piece moves between two people. Which reading does NIST SP 800-61 support?

選択肢

  1. The main reason for gathering is to settle the incident, and yet what is gathered may be wanted in a court, so the procedures are drawn up well beforehand together with the legal staff and the officers of the law, and a piece that moves between two people is logged by the one who hands it over alone, in that hand-to-hand record.
  2. The main reason for gathering is to build a case in a court, and yet what is gathered may help settle the incident, so the procedures are drawn up beforehand with the legal staff and the officers of the law, and a piece that moves between two people is written up on a form that carries the mark of both, in that hand-to-hand record.
  3. The main reason for gathering is to settle the incident, and yet what is gathered may be wanted in a court, so the procedures are drawn up beforehand with the legal staff and the officers of the law, and a piece that moves between two people is written up on a form that carries the mark of both, in that hand-to-hand record.
  4. The main reason for gathering is to build a case in a court, and yet what is gathered may help settle the incident, so the procedures are settled after the fact by the very team that gathered and held on to it, and a piece that moves between two people is logged by the one who hands it over alone, in that hand-to-hand record.

解答・解説を確認するには

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。