Gain Knowledge on Analyzing Incidents with a Focus on Controls. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Why is it important to assess the impact of an incident on stakeholders?

   • ATo determine the exact number of affected users
   • BTo prioritize response efforts based on the severity of the impact
   • CTo identify the attacker's motivation
   • DTo comply with legal requirements for reporting
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   After completing the analysis of a security incident, the analyst must document the findings. The documentation will be used for a post-incident review and potential legal proceedings. What is the most important characteristic of the documentation?

   • AIt includes a detailed timeline, evidence, and analysis methods used.
   • BIt is written in technical jargon that only the incident response team can understand.
   • CIt focuses on the remediation steps taken rather than the analysis process.
   • DIt is concise and only includes the final conclusions.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is an example of a suspicious activity that could indicate a security incident?

   • AA user logging in from their usual workstation during business hours
   • BAn employee accessing a shared drive they have permission to use
   • CMultiple failed login attempts followed by a successful login from a foreign IP address
   • DA server sending routine health checks to a monitoring system
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An analyst is assessing the impact of a malware infection that has affected several workstations. The analyst has determined that the malware is a keylogger that captures keystrokes. Which factor is most important to consider when determining the impact?

   • AThe version of the keylogger malware.
   • BThe number of workstations affected.
   • CThe duration of the keylogger's operation.
   • DThe type of data that could be captured by the keylogger.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary goal of communicating incident analysis results to stakeholders?

   • ATo delay communication until the incident is fully resolved
   • BTo provide timely and actionable information that supports decision-making
   • CTo assign blame for the incident
   • DTo share all technical details with every stakeholder equally
   Reveal Solution Discussion Select an answer first