A small business experiences a phishing attack that results in a compromised email account. The account was used to send a few spam messages, but no sensitive data was accessed. The owner asks the IT consultant what should be included in the incident report. Which element is essential?

The names of all employees who received the phishing email.

The scope of the incident, including the affected account, the timeframe, and the actions taken.

The personal phone numbers of the IT consultant and the owner.

A recommendation to purchase a new email security product.

GIAC Cyber Incident Leader

Domain 5Objective 2

Incident Reporting GCIL Practice Questions (Page 11)

Part of the Communication and Reporting domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 4–6 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

Questions 51–51

51application · medium
A small business experiences a phishing attack that results in a compromised email account. The account was used to send a few spam messages, but no sensitive data was accessed. The owner asks the IT consultant what should be included in the incident report. Which element is essential?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCIL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIL” is a trademark of its owner, used for identification only.

Incident Reporting GCIL Practice Questions (Page 11)

Questions 51–51

A small business experiences a phishing attack that results in a compromised email account. The account was used to send a few spam messages, but no sensitive data was accessed. The owner asks the IT consultant what should be included in the incident report. Which element is essential?

Keep studying — Communication and Reporting