Align Cybersecurity Incident Response with an Organizations Incident Management, Change Management, and Other ITSM/ITIL Processes. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   What is the primary goal of a post-incident review in the context of ITSM continuous improvement?

   • ATo document the incident for legal purposes only.
   • BTo close the incident ticket as quickly as possible.
   • CTo identify lessons learned and update processes to prevent or improve future incident handling.
   • DTo assign blame to individuals who made mistakes during the incident.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An organization is defining its cybersecurity incident response communication plan. They want to ensure that during a major security incident, the right stakeholders are informed at the right time. Which of the following best aligns with ITIL/ITSM communication and escalation procedures?

   • ARely on the incident commander to decide who to contact on a case-by-case basis.
   • BDefine a communication matrix that specifies who to notify, when, and through which channels, and integrate it with the ITSM tool.
   • COnly notify the executive team after the incident is fully resolved.
   • DSend updates to all employees via email at every stage of the incident.
   Reveal Solution Discussion Select an answer first
3. 28foundation · easy

   During a cybersecurity incident, a security analyst needs to implement an emergency firewall rule to block malicious traffic. Which ITIL process should be engaged to authorize this change?

   • AProblem management
   • BIncident management
   • CService asset and configuration management
   • DChange management
   Reveal Solution Discussion Select an answer first