CIM Incident Response Planning & Coordination 4

Question 1

An Incident Manager is coordinating a response across three geographic time zones. Which planning element is MOST critical to address in the IRP?

Accepted Answer

Defining on-call schedules and follow-the-sun handoff procedures across time zones

Answer

Follow-the-sun handoff procedures and on-call schedules ensure continuous coverage and smooth ownership transitions across geographic boundaries.

Question 2

A new Incident Manager inherits a plan that lists functional roles (e.g., 'Network Lead') rather than named individuals. What is the advantage of this approach?

Accepted Answer

It makes the plan resilient to personnel changes, as roles persist even when individuals leave

Answer

Role-based plans remain valid when staff turn over, while name-based plans become outdated immediately when individuals change positions.

Question 3

During a high-profile incident, a senior executive demands a status update directly from the lead technician, bypassing the Incident Manager. What is the BEST response by the Incident Manager?

Accepted Answer

Intercept the request, provide the status update to the executive, and redirect future inquiries to preserve the technician's focus

Answer

The Incident Manager's role includes shielding technical resolvers from distractions; providing the update directly preserves focus and maintains the command structure.

Question 4

What distinguishes a 'workaround' from a 'permanent fix' in the context of incident response coordination?

Accepted Answer

A workaround restores service temporarily while root cause investigation continues; a permanent fix eliminates the root cause

Answer

Workarounds restore acceptable service levels quickly without solving the underlying cause, allowing problem management to pursue permanent resolution separately.

Question 5

An IRP review reveals that resolver teams consistently bypass the designated Incident Manager role and self-coordinate during incidents. What is the PRIMARY organizational risk?

Accepted Answer

Uncoordinated self-management leads to conflicting changes, missed communications, and slower resolution

Answer

Without a coordinating authority, teams may implement conflicting fixes, fail to notify key stakeholders, and lose situational awareness, all of which extend incident duration.

(CIM) Certified Incident Manager Practice Test

(CIM) Certified Incident Manager Practice Test

CIM Incident Response Planning & Coordination 4