Spring Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

DES-9131 Specialist - Infrastructure Security Exam Questions and Answers

Questions 4

A continuously updated CMDB is an output of which NIST function and category?

Options:

A.

ID.RM

B.

ID.SC

C.

ID.BE

D.

ID.AM

Buy Now
Questions 5

What database is used to record and manage assets?

Options:

A.

Configuration Management Database

B.

Asset Inventory Management Database

C.

High Availability Mirrored Database

D.

Patch Management Inventory Database

Buy Now
Questions 6

What defines who is accountable for contacting operational teams, managers, and others affected by a

localized, safety critical event?

Options:

A.

Asset Management Plan

B.

Business Impact Analysis

C.

Business Continuity Plan

D.

Incident Response Plan

Buy Now
Questions 7

What is concerned with availability, reliability, and recoverability of business processes and functions?

Options:

A.

Business Impact Analysis

B.

Business Continuity Plan

C.

Recovery Strategy

D.

Disaster Recovery Plan

Buy Now
Questions 8

Your organization was breached. You informed the CSIRT and they contained the breach and eradicated the threat.

What is the next step required to ensure that you have an effective CSRL and a more robust cybersecurity posture in the future?

Options:

A.

Determine change agent

B.

Update the BIA

C.

Conduct a gap analysis

D.

Update the BCP

Buy Now
Questions 9

Rank order the relative severity of impact to an organization of each plan, where “1” signifies the most impact and “4” signifies the least impact.

DES-9131 Question 9

Options:

Buy Now
Questions 10

The Backup Recovery Plan is dependent on what effort?

Options:

A.

PR.DS

B.

RTO

C.

BIA

D.

SDLC

Buy Now
Questions 11

Your firewall blocked several machines on your network from connecting to a malicious IP address. After

reviewing the logs, the CSIRT discovers all Microsoft Windows machines on the network have been affected based on a newly published CVE.

Based on the IRP, what should be done immediately?

Options:

A.

Update the asset inventory

B.

Contain the breach

C.

Eradicate the breach

D.

Revise the IRP

Buy Now
Questions 12

A new employee is starting work at your company. When should they be informed of the company’s security policy?

Options:

A.

Based on human resource policy

B.

After the first security infraction

C.

Annual security policy review

D.

During regular security awareness sessions

Buy Now
Questions 13

What is the purpose of separation of duties?

Options:

A.

Internal control to prevent fraud

B.

Enhance exposure to functional areas

C.

Encourage collaboration

D.

Mitigate collusion and prevent theft

Buy Now
Questions 14

Which NIST Cybersecurity Framework function should be executed before any others?

Options:

A.

Respond

B.

Protect

C.

Recover

D.

Identify

Buy Now
Questions 15

An incident has occurred. You restore backups onto mission/business critical assets. After restoration of the

backups your services are still inaccessible on numerous assets.

What could be the cause of the issue?

Options:

A.

Unverified backups

B.

Incorrect backup strategy

C.

Hardware failure

D.

Network failure

Buy Now
Questions 16

A security audit of the systems on a network must be performed to determine their compliance with security policies. Which control should be used for the audit?

Options:

A.

PR.DS

B.

DE.CM

C.

RS.MI

D.

ID.AM

Buy Now
Questions 17

What type of system processes information, the loss of which would have a debilitating impact to an

organization?

Options:

A.

Mission critical

B.

Security critical

C.

Business critical

D.

Safety critical

Buy Now
Questions 18

What procedure is designed to enable security personnel to detect, analyze, contain, eradicate, respond, and

recover from malicious computer incidents such as a denial-of-service attack?

Options:

A.

Disaster Recovery Plan

B.

Emergency Analysis Plan

C.

Crisis Communication Plan

D.

Incident Response Plan

Buy Now
Exam Code: DES-9131
Exam Name: Specialist - Infrastructure Security Exam
Last Update: Apr 30, 2026
Questions: 60

PDF + Testing Engine

$63.52  $181.49

Testing Engine

$50.57  $144.49
buy now DES-9131 testing engine

PDF (Q&A)

$43.57  $124.49
buy now DES-9131 pdf