CSC Incident Response and Reporting 2

Question 1

During the containment phase of incident response, which action should be taken FIRST?

Accepted Answer

Isolate affected systems to prevent lateral movement

Answer

Isolating affected systems during containment prevents the threat from spreading to other network segments before remediation begins.

Question 2

Which regulation requires covered entities to report a breach of unsecured protected health information within 60 days of discovery?

Accepted Answer

HIPAA Breach Notification Rule

Answer

The HIPAA Breach Notification Rule mandates that covered entities notify affected individuals, HHS, and sometimes media within 60 days of discovering a breach.

Question 3

A 'chain of custody' document in incident response primarily ensures:

Accepted Answer

That evidence integrity is maintained for potential legal proceedings

Answer

Chain of custody documentation tracks who handled digital evidence and when, preserving its admissibility in legal or regulatory proceedings.

Question 4

Under GDPR, what is the maximum timeframe for reporting a personal data breach to the relevant supervisory authority?

Accepted Answer

72 hours

Answer

GDPR Article 33 requires controllers to notify the supervisory authority of a personal data breach within 72 hours of becoming aware of it.

Question 5

Which document defines the roles, responsibilities, and communication procedures to follow during a cybersecurity incident?

Accepted Answer

Incident Response Plan (IRP)

Answer

The Incident Response Plan outlines procedures, assigns roles, and establishes communication flows specifically for managing cybersecurity incidents.

(CSC) Cybersecurity Compliance Certification Practice Test

(CSC) Cybersecurity Compliance Certification Practice Test

CSC Incident Response and Reporting 2