Describe the Elements of Cybersecurity Incident Response 100-160 Practice Questions (Page 11)

Questions 51–52

1. 51foundation · easy

   Which activity is part of the detection and analysis stage of incident response?

   • AConducting a lessons-learned meeting
   • BDeploying additional security tools
   • CRebuilding compromised systems from a clean image
   • DMonitoring network traffic for suspicious activity
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   What is the main purpose of a lessons-learned meeting after an incident?

   • ATo assign blame to individuals who made mistakes during the incident
   • BTo determine the financial cost of the incident
   • CTo restore systems to normal operation
   • DTo identify what went well and what could be improved in the incident response process
   Reveal Solution Discussion Select an answer first