2.3 - Understand Incident Response CC Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company experiences a data breach that exposes customer personal information. The incident response team quickly contains the breach, notifies affected customers, and works with law enforcement. Which benefit of a well-executed incident response is most directly demonstrated by notifying customers and cooperating with law enforcement?

   • AReducing the cost of the incident
   • BMaintaining trust and meeting legal obligations
   • CPreserving evidence for internal analysis
   • DEnsuring business continuity
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Why is incident response critical for maintaining customer trust?

   • AIt guarantees that no data is ever lost during an incident
   • BIt ensures that incidents are handled quickly and effectively, reducing the impact on customers
   • CIt eliminates the need for customer notification after a breach
   • DIt allows organizations to hide security incidents from the public
   Reveal Solution Discussion Select an answer first
4. 8expert · hard · select all that apply

   An organization is developing its incident response program. The team wants to ensure that the program is comprehensive and effective. Which of the following are essential components of an incident response program? (Select all that apply.)

   • AProcedures for detection, containment, eradication, and recovery
   • BDefined roles and responsibilities
   • CA marketing strategy for promoting the company's brand
   • DA communication plan
   • EA list of approved vendors for purchasing new equipment
   Check answers Discussion Select an answer first
5. 9application · medium

   An organization is updating its incident response plan. The team wants to ensure that the plan is practical and that roles are clear. Which step is most important to include during the development of the plan?

   • AWriting the plan in technical jargon to impress auditors
   • BConducting tabletop exercises to validate the plan and train staff
   • CKeeping the plan confidential from all employees
   • DPurchasing the most expensive security tools available
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which strategy is used to contain an incident by isolating affected systems from the network?

   • AUser training
   • BPatch management
   • CNetwork segmentation
   • DData backup
   Reveal Solution Discussion Select an answer first