Comprehend the Reporting and Communication Aspects of Incident Response. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   An organization is sharing incident indicators with a trusted industry information-sharing group. Which practice best maintains confidentiality and integrity during this exchange?

   • ASending the indicators via personal email to a known contact
   • BPosting the indicators on a public forum for wider reach
   • CEncrypting the communication and using a secure, vetted platform
   • DSharing the indicators verbally over the phone without any record
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An organization's incident response team is documenting a security incident. Which piece of information is MOST critical to record for post-incident review and potential legal proceedings?

   • AThe color of the server room walls
   • BThe exact time and date of each response action taken
   • CThe personal opinions of team members about the incident's cause
   • DThe names of all employees who were on vacation during the incident
   Reveal Solution Discussion Select an answer first