Incident Management Improvement GCIL Practice Questions (Page 11)

Questions 51–53

1. 51foundation · easy

   Which activity is part of skill development for incident handlers?

   • ADeleting old incident reports
   • BConducting tabletop exercises
   • CReducing the incident response team size
   • DIncreasing the number of firewalls
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   Your team is conducting a post-incident review for a service outage caused by a misconfigured firewall rule. The review should identify what went well, what went wrong, and what can be improved. Which structure best achieves this?

   • AFocus only on the technical failure and how to fix the firewall rule.
   • BHave the incident commander write a narrative summary of the incident.
   • CUse a structured template with sections for timeline, what went well, what went wrong, and action items.
   • DAsk each team member to write a personal report and compile them without discussion.
   Reveal Solution Discussion Select an answer first
3. 53expert · hard

   Your team's incident response playbook is outdated and does not reflect recent changes in the IT environment, such as new cloud services. The team is busy with day-to-day operations, and updating the playbook is not a priority. However, an incident involving the new cloud services could occur soon. What is the best way to manage this situation?

   • AUse the cloud provider's documentation as the playbook for cloud incidents.
   • BWait until the next incident to update the playbook based on real experience.
   • CAssign the playbook update to a junior team member as a side task.
   • DPrioritize a rapid update of the playbook for the new cloud services and schedule a brief validation exercise.
   Reveal Solution Discussion Select an answer first