CSX Report Writing & Documentation 2

Question 1

When documenting a security incident timeline, which format best supports chronological accuracy?

Accepted Answer

UTC timestamps with millisecond precision

Answer

UTC timestamps with millisecond precision eliminate timezone ambiguity and support precise correlation across distributed systems.

Question 2

Which section of an executive summary should describe the business impact of a security incident?

Accepted Answer

Risk and impact assessment

Answer

The risk and impact assessment section translates technical findings into business terms that executives can act upon.

Question 3

A penetration tester discovers a critical vulnerability but the client asks to omit it from the report. What is the appropriate response?

Accepted Answer

Include it and note the client's objection

Answer

Professional integrity requires documenting all findings; the tester should include the finding while noting any client disagreement.

Question 4

What does CVSS base score measure in vulnerability reporting?

Accepted Answer

The intrinsic characteristics of a vulnerability independent of environment

Answer

CVSS base score captures the intrinsic properties of a vulnerability such as attack vector, complexity, and impact, independent of any specific environment.

Question 5

Which chain-of-custody element is most critical when digital evidence may be used in legal proceedings?

Accepted Answer

Hash values taken before and after each transfer

Answer

Cryptographic hash values verify that evidence has not been altered during collection, storage, or transfer, which is essential for admissibility.

(CSX) Cybersecurity Nexus Certification Practice Test

(CSX) Cybersecurity Nexus Certification Practice Test

CSX Report Writing & Documentation 2