Free CDFI Incident Response & Reporting Questions and Answers

Question 1

What is the first step in incident response?

Accepted Answer

Identifying the incident

Answer

Reporting to media.

Answer

Deleting affected files.

Answer

Ignoring alerts.

Question 2

Why is containment important in incident response?

Accepted Answer

To limit damage

Answer

To increase downtime.

Answer

To avoid investigation.

Answer

To speed up recovery.

Question 3

What is the purpose of eradication in incident response?

Accepted Answer

To remove cause of incident

Answer

To identify new threats.

Answer

To backup data.

Answer

To notify customers.

Question 4

Why is recovery a critical phase?

Accepted Answer

It restores normal operations

Answer

It causes further downtime.

Answer

It deletes incident logs.

Answer

It ignores vulnerabilities.

Question 5

What should be included in incident reports?

Accepted Answer

Comprehensive incident details

Answer

Personal opinions.

Answer

Unverified rumors.

Answer

Confidential data.

Question 6

Who should be notified during a major security incident?

Accepted Answer

All relevant stakeholders

Answer

Only IT staff.

Answer

No one.

Answer

External media only.

Question 7

Why is post-incident analysis important?

Accepted Answer

To improve response and prevent recurrence

Answer

To blame individuals.

Answer

To ignore findings.

Answer

To close the investigation prematurely.

Question 8

What is a key characteristic of an effective incident response team?

Accepted Answer

Trained and coordinated team

Answer

Slow decision-making.

Answer

Limited communication.

Answer

Unclear roles.

Question 9

Which documentation aids in compliance and audits?

Accepted Answer

Detailed incident documentation

Answer

Unorganized notes.

Answer

No documentation.

Answer

Informal emails.