During an incident, a security analyst needs to share a suspicious file hash with a threat intelligence sharing community. The community requires that the information be shared in a structured format. Which format is MOST appropriate for this purpose?

A verbal description over the phone

An incident response team is coordinating with external cybersecurity experts during a critical incident. They need to share sensitive technical details, including network diagrams and vulnerability information. Which communication protocol is MOST appropriate for this exchange?

Discuss the details over a public video conferencing platform

Use a secure file-sharing service with encryption and access controls

Use a public cloud storage link with no access restrictions

Send the information via unencrypted email

After a major incident, the incident response team is preparing a post-incident report. The report will be shared with both technical staff and executive leadership. What is the BEST approach to ensure the report is effective for both audiences?

Write a single high-level report with no technical details

Write two separate reports: one technical for staff and one executive summary for leadership

Write a report only for executive leadership, excluding technical staff

Write a single highly technical report for all audiences

During an incident, the incident response team is documenting actions in a shared document. A team member accidentally deletes a critical log entry. What is the BEST practice to prevent this from happening in future incidents?

Avoid documenting actions to prevent errors

Use a version-controlled documentation system with regular backups

Store documentation only on a single local drive

Assign one person to manually type all documentation

An incident response team is documenting actions taken during a security incident. Which documentation practice is MOST important for maintaining the integrity of the records?

Writing notes on paper and storing them in a drawer

Recording actions in a shared spreadsheet without version control

Sending updates via personal email accounts

Using a tamper-evident log with timestamps and user identification

Dell NIST Cybersecurity Framework v2.0

Domain 6Objective 4

Comprehend the Reporting and Communication Aspects of Incident Response. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 2)

Part of the NIST Framework: RESPOND Function domain, which accounts for 8% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

27questions here

6free pages

6concepts

8%of the exam

Questions 6–10

6application · medium
During an incident, a security analyst needs to share a suspicious file hash with a threat intelligence sharing community. The community requires that the information be shared in a structured format. Which format is MOST appropriate for this purpose?
Select an answer first
7application · medium
An incident response team is coordinating with external cybersecurity experts during a critical incident. They need to share sensitive technical details, including network diagrams and vulnerability information. Which communication protocol is MOST appropriate for this exchange?
Select an answer first
8expert · hard
After a major incident, the incident response team is preparing a post-incident report. The report will be shared with both technical staff and executive leadership. What is the BEST approach to ensure the report is effective for both audiences?
Select an answer first
9expert · hard
During an incident, the incident response team is documenting actions in a shared document. A team member accidentally deletes a critical log entry. What is the BEST practice to prevent this from happening in future incidents?
Select an answer first
10application · medium
An incident response team is documenting actions taken during a security incident. Which documentation practice is MOST important for maintaining the integrity of the records?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.