Reconnaissance, Threat Handling, and Incident Response GDAT Practice Questions (Page 11)

Questions 51–53

1. 51application · easy

   An organization has just experienced a security incident. The incident response team has completed containment, eradication, and recovery. The team is now conducting a review to identify what went well and what could be improved. Which phase of the incident response lifecycle is this?

   • ADetection and analysis
   • BContainment, eradication, and recovery
   • CPost-incident activity
   • DPreparation
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   During incident response, how does threat intelligence support decision-making?

   • AIt automatically eradicates the threat
   • BIt guarantees the incident will be resolved quickly
   • CIt replaces the need for forensic analysis
   • DIt provides context about the adversary's capabilities and intent
   Reveal Solution Discussion Select an answer first
3. 53foundation · easy

   Which phase of the incident response lifecycle involves identifying the scope of the incident and gathering evidence?

   • ADetection and Analysis
   • BPreparation
   • CPost-Incident Activity
   • DContainment, Eradication, and Recovery
   Reveal Solution Discussion Select an answer first