CAP Incident Response & Recovery 3

Question 1

Which role within an incident response team is responsible for coordinating communications with external parties such as law enforcement and the media?

Accepted Answer

Public Affairs Officer / Liaison

Answer

The Public Affairs Officer or Liaison manages external communications including media, law enforcement, and other stakeholders during an incident.

Question 2

Under FISMA, an agency experiences a breach of PII affecting 5,000 individuals. What additional reporting requirement is triggered?

Accepted Answer

Notify affected individuals and potentially US-CERT within strict timelines

Answer

Breaches of PII trigger mandatory notification to affected individuals and US-CERT reporting under OMB guidelines and agency privacy policies.

Question 3

What is the purpose of a 'jump bag' in incident response?

Accepted Answer

A portable kit of tools and documentation ready for immediate incident response deployment

Answer

A jump bag is a pre-packed collection of hardware, software, and documentation that responders can grab immediately when deploying to handle an incident.

Question 4

During post-incident analysis, a team discovers the attack exploited an unpatched vulnerability. According to NIST SP 800-61, this finding should primarily feed into:

Accepted Answer

The lessons learned report and remediation plan

Answer

Post-incident analysis findings, especially root cause identification, should be documented in the lessons learned report and drive concrete remediation actions.

Question 5

Which type of incident response team model is most appropriate for a large federal agency with geographically dispersed offices?

Accepted Answer

Distributed team

Answer

A distributed team model places incident handlers at multiple geographic locations, making it better suited for large agencies with dispersed operations.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Incident Response & Recovery 3