CCD Incident Response & Threat Detection

Question 1

What is the first step in the incident response process?

Accepted Answer

Preparation

Answer

Containment

Answer

Eradication

Answer

Recovery

Question 2

Which of the following best describes threat hunting?

Accepted Answer

Manually searching for indicators of compromise.

Answer

Waiting for alerts from antivirus software.

Answer

Only monitoring firewalls.

Answer

Shutting down infected systems immediately.

Question 3

What is the purpose of a security information and event management (SIEM) system?

Accepted Answer

Monitor and analyze security data in real time.

Answer

Encrypt data automatically.

Answer

Send marketing emails.

Answer

Back up system files.

Question 4

Which term describes evidence that indicates a potential security breach?

Accepted Answer

Indicators of compromise

Answer

Patch notes

Answer

System logs

Answer

User permissions

Question 5

What is the primary goal of containment during incident response?

Accepted Answer

To stop the incident from spreading.

Answer

To notify the press immediately.

Answer

To identify all affected files.

Answer

To restore data from backup.

Question 6

What should be done immediately after detecting a confirmed breach?

Accepted Answer

Alert the incident response team.

Answer

Inform the media.

Answer

Unplug all network cables.

Answer

Ignore and monitor for further activity.

Question 7

Why is documentation important in incident response?

Accepted Answer

To track and learn from incidents.

Answer

To punish employees.

Answer

To destroy evidence.

Answer

To delay response actions.

Question 8

Which of the following is an example of an indicator of compromise?

Accepted Answer

Unusual outbound network traffic.

Answer

Frequent password changes.

Answer

Updated antivirus software.

Answer

Successful login events.

Question 9

What is the final phase in the incident response process?

Accepted Answer

Lessons learned

Answer

Detection

Answer

Containment

Answer

Eradication