What is the primary purpose of incident response within an organization's network defense strategy?

To detect, respond to, and recover from security incidents in a structured manner

To prevent all security incidents from occurring

To replace other security controls such as firewalls and antivirus

To ensure compliance with all regulatory requirements

What is the purpose of incident classification in the triage process?

To decide whether to involve law enforcement

To assign a severity level based on the incident's potential impact and urgency

To determine the legal jurisdiction of the incident

To identify the specific malware family involved

During a major incident, the incident commander is coordinating the response. Which responsibility is most appropriate for the incident commander?

Communicating with external media outlets.

Analyzing malware samples to determine the attack vector.

Making strategic decisions about containment and resource allocation.

Performing forensic imaging of affected systems.

During a major security incident, the incident response team is activated. The team includes a lead analyst, a communications liaison, and an incident commander. The incident commander is responsible for which of the following?

Communicating with external stakeholders such as law enforcement and the media

Performing the technical analysis of the malware and affected systems

Collecting and preserving digital evidence for legal proceedings

Directing the overall response strategy and making final decisions on containment and eradication

EC-CouncilCertified Network Defender

Domain 6Objective 1

Incident Response and Forensics Investigation CND Practice Questions (Page 3)

Part of the Incident Response, Forensics and Continuity domain, which makes up ~13% of our current practice bank.

66questions here

14free pages

15concepts

15 Concepts in This Objective

Incident Response Fundamentals
Incident Response Phases
Incident Response Team Roles
Incident Classification and Triage
Evidence Collection and Preservation
Forensic Imaging and Duplication
Forensic Analysis Techniques
Log Analysis and Correlation
Memory and Volatile Data Analysis
Network Forensics
Malware Analysis Basics
Forensic Reporting and Documentation
Legal and Ethical Considerations
Incident Recovery and Remediation
Lessons Learned and Post-Incident Review

Questions 11–15

11foundation · easy
During which phase of the incident response lifecycle does the organization focus on removing the root cause of the incident from affected systems?
Select an answer first
12foundation · easy
What is the primary purpose of incident response within an organization's network defense strategy?
Select an answer first
13foundation · easy
What is the purpose of incident classification in the triage process?
Select an answer first
14application · easy
During a major incident, the incident commander is coordinating the response. Which responsibility is most appropriate for the incident commander?
Select an answer first
15application · medium
During a major security incident, the incident response team is activated. The team includes a lead analyst, a communications liaison, and an incident commander. The incident commander is responsible for which of the following?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.