Incident Response Concepts and Application GCED Practice Questions (Page 11)

Questions 51–51

1. 51application · medium

   A security analyst receives an alert about a potential malware infection on a single user's workstation. The analyst checks the company's incident classification guide and determines that this type of malware is low severity and does not require immediate action. However, the user is a senior executive. How should the analyst classify this incident?

   • AClassify it as low severity based on the malware type, but note the executive's role as a factor in prioritization.
   • BEscalate to the incident commander immediately because the executive is involved.
   • CIgnore the alert because the malware is low severity.
   • DClassify it as high severity because the user is a senior executive.
   Reveal Solution Discussion Select an answer first