CC Incident Response 6

Question 1

How does Incident Response relate to risk management?

Accepted Answer

It identifies, assesses, and mitigates risks specific to this domain

Answer

It has absolutely no relationship to risk management

Answer

It eliminates all risks completely and permanently

Answer

It transfers all risks to insurance providers

Question 2

What reporting is needed for Incident Response?

Accepted Answer

Regular reports to relevant stakeholders with actionable insights and metrics

Answer

No reporting is required at any level

Answer

Annual reports only to executive leadership

Answer

Reports only when significant problems are detected

Question 3

How does Incident Response support audit requirements?

Accepted Answer

Through documented processes, evidence collection, and traceability

Answer

Audit requirements do not apply to this area

Answer

By avoiding all documentation to reduce exposure

Answer

By restricting auditor access to all systems

Question 4

What vendor considerations apply to Incident Response?

Accepted Answer

Evaluating vendors, managing SLAs, and monitoring ongoing performance

Answer

Vendor management is completely separate from this topic

Answer

Always select the cheapest vendor available

Answer

Vendor relationships are irrelevant

Question 5

How should Incident Response be budgeted?

Accepted Answer

Based on risk assessment, expected ROI, and organizational priorities

Answer

Allocate minimum possible budget always

Answer

Allocate maximum available budget always

Answer

No budget allocation is needed for this area

Question 6

What exam preparation tips apply to Incident Response?

Accepted Answer

Understand core concepts, practice with scenarios, and learn key terminology

Answer

Memorize everything without understanding the concepts

Answer

Skip this topic entirely on the exam

Answer

Only study the night before the exam