DES-9131 Online Training Archives

DELL EMC DES-9131 is a high gold content certification exam. Exam4Training DELL EMC DES-9131 Specialist – Infrastructure Security Exam Online Training allows candidates to learn in the case of mock examinations. You can control the kinds of questions and some of the problems and the time of each test. In the site of Exam4Training, you can prepare for the Specialist – Infrastructure Security Exam exam without stress and anxiety. At the same time, you also can avoid some common mistakes. So you will gain confidence and be able to repeat your experience in the actual test to help you to pass the DECS DES-9131 exam successfully.

Page 1 of 3

1. What are the four tiers of integration within the NIST Cybersecurity Framework?

Selective, Repeatable, Partial, and Adaptive

Partial, Risk Informed, Repeatable, and Adaptive

Corrective, Risk Informed, Repeatable. and Adaptive

Risk Informed, Selective, Repeatable, and Partial

2. What procedure is designed to enable security personnel to detect, analyze, contain, eradicate, respond, and recover from malicious computer incidents such as a denial-of-service attack?

Disaster Recovery Plan

Emergency Analysis Plan

Crisis Communication Plan

Incident Response Plan

3. What determines the technical controls used to restrict access to USB devices and help prevent their use within a company?

Block use of the USB devices for all employees

Written security policy prohibiting the use of the USB devices

Acceptable use policy in the employee HR on-boarding training

Detect use of the USB devices and report users

4. Concerning a risk management strategy, what should the executive level be responsible for communicating?

Risk mitigation

Risk profile

Risk tolerance

Asset risk

5. What process is used to identify an organization’s physical, digital, and human resource, as required in their Business Impact Analysis?

Risk Management Strategy

Risk Assessment

Risk Treatment

Asset Inventory

6. What supports an organization in making risk management decisions to address their security posture in real time?

Baseline reporting

Continuous monitoring

User access reviews

Video surveillance

7. When should event analysis be performed?

Only when requested by an auditor

Routinely for all events collected on a mission critical system

Only at the discretion of an authorized security analyst

After an event is triggered by the detection system

8. What type of system processes information, the loss of which would have a debilitating impact to an organization?

Mission critical

Security critical

Business critical

Safety critical

9. Which mechanism within the NIST Cybersecurity Framework describes a method to capture the current state and define the target state for understanding gaps, exposure, and prioritize changes to mitigate risk?

Functions

Profiles

Tiers

Categories

10. The CSF recommends that the Communication Plan for an IRP include audience, method of communication, frequency, and what other element?

Incident category

Message criteria

Incident severity

Templates to use

Page 2 of 3

11. What is the main goal of a gap analysis in the Identify function?

Determine security controls to improve security measures

Determine actions required to get from the current profile state to the target profile state

Identify gaps between Cybersecurity Framework and Cyber Resilient Lifecycle pertaining to that function

Identify business process gaps to improve business efficiency

12. DRAG DROP

Rank order the relative severity of impact to an organization of each plan, where “1” signifies the most impact and “4” signifies the least impact.

13. What does a security benchmark help define?

Whether or not the organization should implement ISCM

The Baseline, or “as is” state

Which step of the DRP to execute first

What parts of the Baseline are appropriate

14. In which function is the SDLC implemented?

Respond

Protect

Detect

Recover

15. Which category addresses the detection of unauthorized code in software?

16. What database is used to record and manage assets?

Configuration Management Database

Asset Inventory Management Database

High Availability Mirrored Database

Patch Management Inventory Database

17. The CSIRT team is following the existing recovery plans on non-production systems in a PRE-BREACH scenario.

This action is being executed in which function?

Protect

Recover

Identify

Respond

18. What is a consideration when performing data collection in Information Security Continuous Monitoring?

Data collection efficiency is increased through automation.

The more data collected, the better chances to catch an anomaly.

Collection is used only for compliance requirements.

Data is best captured as it traverses the network.

19. An organization has a policy to respond “ASAP” to security incidents. The security team is having a difficult time prioritizing events because they are responding to all of them, in order of receipt.

Which part of the IRP does the team need to implement or update?

Scheduling of incident responses

‘Post mortem’ documentation

Classification of incidents

Containment of incidents

20. Your firewall blocked several machines on your network from connecting to a malicious IP address. After reviewing the logs, the CSIRT discovers all Microsoft Windows machines on the network have been affected based on a newly published CVE.

Based on the IRP, what should be done immediately?

Update the asset inventory

Contain the breach

Eradicate the breach

Revise the IRP

Page 3 of 3

21. Which document provides an implementation plan to recover business functions and processes during and after an event?

Business Continuity Plan

Disaster Recovery Plan

Risk Assessment Strategy

Business Impact Analysis

22. Which NIST Cybersecurity Framework function should be executed before any others?

Respond

Protect

Recover

Identify

23. What is part of the Pre-Recovery phase?

Backup validation

Validate functionality

Restore assets

Monitor assets

24. Refer to the exhibit.

What type of item appears in the second column of the table?

Subcategory

Informative Reference

Function

Tier

25. What must be included in the CMDB?

Inventory of uninstalled software

Software End User Licensing Agreements

Dependencies of installed components

Known vulnerabilities of installed software

Exam4Training provides you not only with the best DELL EMC DES-9131 Specialist – Infrastructure Security Exam Online Training and also with excellent service. If you buy Exam4Training DELL EMC DES-9131 exam, free update for one year is guaranteed. So, you can always have the latest DELL EMC DES-9131 Specialist – Infrastructure Security Exam Online Training.Exam4Training has a lot of confidence in our DECS DES-9131 dumps and pass your Specialist – Infrastructure Security Exam exam successfully.

Please go to DELL EMC DES-9131 Specialist – Infrastructure Security Exam Online Training to view this quiz