Question 1

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security

incident?

Options :

A : Post Incident Activity

B : Detection & Analysis

C : Preparation and Identification

D : Containment, Eradication, and Recovery

Answer: D

Question 2

The severity field of the security incident is influenced by what?

Options :

A : The cost of the response to the security breach

B : The impact, urgency and priority of the incident

C : The time taken to resolve the security incident

D : The business value of the affected asset

Answer: D

Question 3

Which of the following management activities are associated with Major Security Incident Management?

Options :

A : Link security incidents as child incidents to other child incidents, so that all security incidents can be worked

B : Link security incidents as parent incidents to the major security incident (MSI) so that all security incidents can be worked

C : Link security incidents as child incidents to the major security incident (MSI) so that all security incidents can be worked

D : Link security incidents as minor incidents to the major security incident (MSI) so that all security incidents can be worked

Answer: C

Question 4

Chief factors when configuring auto-assignment of Security Incidents are __________.

Options :

A : Agent group membership, Agent location and time zone

B : Security incident priority, CI Location and agent time zone

C : Agent skills, System Schedules and agent location

D : Agent location, Agent skills and agent time zone

Answer: D

Question 5

The following term is used to describe any observable occurrence: __________.

Options :

A : Incident

B : Log

C : Ticket

D : Alert

E : Event

Answer: A