FedVTE Cyber Risk Management For
Technicians
In order to automate host characteristic monitoring you can compare baselines and
snapshots with syslog. - False
The following should be taken into account when accepting the residual risk inherent in the
project. - All of the above
What is the high water mark for an information system? - Highest Potential Impact value
assigned to each Security Objective (AIC) for all Security Categories resident on the system
and the overall classification of the system.
Which of the following describes NetScan Tools Pro? - B. A powerful command line packet
analyzer
C. A tool that provides advanced network trace routing
D. A collection of Internet information gathering and network troubleshooting utilities
FIPS 200 is: - A short document that describes the minimum security requirements for
information and information systems
Which risk comes from a failure of the controls to properly mitigate risk? - A. Inherent risk
C. Control Risk
D. All of the above
Open Source Security (OSSEC) is what? - A host based security system that monitors for
changes
What tool would be best to automatically detect your network and construct a complete
and easy to view network map? - LANsurveyor
Which NIST special publication is a guide for Applying the Risk Management Framework to
Federal Information Systems: A Security Life Cycle Approach? - NIST SP 800 37
Which of the following is a part of the Examine Method? - Inspecting the physical security
measures
If the cost of controls exceeds the benefit the organization may choose to accept the risk
instead. - True
