CSL Incident Response & Crisis Management

Question 1

What is the first step in the incident response process?

Accepted Answer

Identification

Answer

Eradication

Answer

Recovery

Answer

Containment

Question 2

Why is containment important during a cyber incident?

Accepted Answer

To prevent spread and damage

Answer

To notify customers

Answer

To delete logs

Answer

To publish press releases

Question 3

What is the goal of the recovery phase?

Accepted Answer

Restore normal operations

Answer

Improve marketing

Answer

Launch a new service

Answer

Audit financial records

Question 4

What does an incident response plan define?

Accepted Answer

Response roles and procedures

Answer

Company mission statement

Answer

User profile settings

Answer

Training materials

Question 5

Why is post-incident review important?

Accepted Answer

To improve future response and security

Answer

To assign blame

Answer

To reduce employee count

Answer

To delete data

Question 6

Who typically leads a crisis management team?

Accepted Answer

Incident commander or senior leader

Answer

Interns

Answer

Sales manager

Answer

Software developer

Question 7

What is one benefit of having an incident response team (IRT)?

Accepted Answer

Ensures effective and quick response

Answer

Delays containment

Answer

Improves press coverage

Answer

Avoids documentation

Question 8

What should be done immediately after identifying a ransomware attack?

Accepted Answer

Isolate affected systems

Answer

Pay the ransom

Answer

Inform shareholders

Answer

Upgrade software

Question 9

How can organizations improve crisis communication?

Accepted Answer

Create predefined communication plans

Answer

Use social media rumors

Answer

Disable contact lists

Answer

Avoid media contact