Incident Management CDPSE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   How should lessons learned from a post-incident review be applied?

   • ABy keeping them confidential to avoid legal liability
   • BBy ignoring them if the incident was minor
   • CBy deleting the incident response plan
   • DBy updating the incident response plan and providing additional training
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   After resolving a privacy incident, the incident response team conducts a post-incident review. The review reveals that the incident was caused by a lack of encryption on a database that was accidentally exposed. What should be the PRIMARY outcome of this review?

   • AA communication plan for notifying stakeholders about the incident
   • BA set of actionable recommendations to improve security controls, such as implementing encryption and access controls
   • CA determination of which employees should be held accountable
   • DA detailed timeline of the incident for legal purposes
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company is updating its privacy incident response plan. The plan must clearly define roles and responsibilities for the privacy team, IT, legal, and communications. What is the PRIMARY benefit of defining these roles in the plan?

   • AIt ensures a coordinated and efficient response by clarifying who is responsible for each action
   • BIt guarantees that the incident will be contained quickly
   • CIt reduces the need for training because everyone knows their role
   • DIt eliminates the need for external communication during an incident
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   Following a privacy incident, the post-incident review identifies that the incident occurred because a critical patch was not applied to a web server. The team is considering several actions. Which action BEST ensures the lesson is applied to prevent recurrence?

   • ARetrain the server administrators on the importance of applying patches
   • BUpdate the patch management policy to require critical patches to be applied within a defined timeframe and verify compliance
   • CConduct a vulnerability scan to identify other unpatched servers
   • DAdd the incident to the lessons-learned log and share it with the security team
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which factor is most important when determining the severity of a privacy incident?

   • AThe number of IT staff available
   • BThe cost of the incident response
   • CThe potential harm to affected individuals
   • DThe time of day the incident occurred
   Reveal Solution Discussion Select an answer first