A SOC is handling two incidents. Incident A is a ransomware infection on a file server that is used by the entire organization. The ransomware is actively encrypting files. Incident B is a data breach involving the exfiltration of customer credit card information from a payment processing system. The breach was detected after the data was already exfiltrated. Which incident should be prioritized?

Both incidents equally, because they are both high severity

Incident A, because it is actively causing damage and affecting the entire organization

Incident B, because it involves credit card data and legal obligations

Incident B, because it involves sensitive customer data and regulatory implications

An incident is being prioritized. Which of the following is a recognized factor that influences incident prioritization?

The analyst's personal preference

EC-CouncilSOC Essentials

Domain 8Objective 2

Incident Classification and Prioritization SCE Practice Questions (Page 9)

Part of the Incident Response and Handling domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 2–2 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

6concepts

Questions 41–42

41expert · hard
A SOC is handling two incidents. Incident A is a ransomware infection on a file server that is used by the entire organization. The ransomware is actively encrypting files. Incident B is a data breach involving the exfiltration of customer credit card information from a payment processing system. The breach was detected after the data was already exfiltrated. Which incident should be prioritized?
Select an answer first
42foundation · easy
An incident is being prioritized. Which of the following is a recognized factor that influences incident prioritization?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.

Incident Classification and Prioritization SCE Practice Questions (Page 9)

Questions 41–42

An incident is being prioritized. Which of the following is a recognized factor that influences incident prioritization?

Keep studying — Incident Response and Handling