CSPM Security Incident Response & Management 3

Question 1

What does MTTR stand for in incident response metrics?

Accepted Answer

Mean Time to Recover

Answer

MTTR stands for Mean Time to Recover (or Resolve), measuring the average time from incident detection to full system restoration.

Question 2

A CSPM must ensure that incident response activities align with the project schedule. Which approach best balances security response with project continuity?

Accepted Answer

Continue project work on unaffected systems while the IR team handles the incident in parallel

Answer

Isolating affected systems while continuing work on unaffected areas allows the project to maintain momentum while the IR team focuses on containment and resolution.

Question 3

What is the purpose of an Incident Severity Classification system?

Accepted Answer

To prioritize resource allocation and response speed based on business impact

Answer

Severity classification (e.g., Critical, High, Medium, Low) helps organizations prioritize their response efforts and allocate appropriate resources based on the incident's potential business impact.

Question 4

What is 'digital forensics' as applied in a security incident context?

Accepted Answer

The scientific collection, preservation, and analysis of digital evidence for investigation

Answer

Digital forensics involves the rigorous, scientifically sound collection and analysis of digital evidence to reconstruct events, identify threat actors, and support legal or disciplinary proceedings.

Question 5

Which communication document is typically sent to stakeholders during a significant security incident to provide status updates?

Accepted Answer

Incident Situation Report (SitRep)

Answer

A Situation Report (SitRep) provides stakeholders with timely, structured updates on incident status, current actions, and next steps during an active incident.

(CSPM) Certified Security Project Manager Practice Test

(CSPM) Certified Security Project Manager Practice Test

CSPM Security Incident Response & Management 3