FREE CyberVista Defensive Strategies & Incident Response Questions and Answers

Question 1

What is the purpose of a security policy?

Accepted Answer

To define security protocols and guidelines

Answer

To confuse attackers.

Answer

To replace compliance reports.

Answer

To promote open access to data.

Question 2

What is the first phase of the incident response lifecycle?

Accepted Answer

Preparation

Answer

Containment.

Answer

Eradication.

Answer

Recovery.

Question 3

Why is incident detection important?

Accepted Answer

To respond promptly and limit damage

Answer

To increase system downtime.

Answer

To replace firewalls.

Answer

To test backup systems.

Question 4

What is a honeypot in cybersecurity?

Accepted Answer

A decoy system to detect and study attacks

Answer

A type of backup server.

Answer

An email filter.

Answer

An antivirus update.

Question 5

Why is containment a key step in incident response?

Accepted Answer

It prevents further damage during an attack

Answer

It slows down the internet.

Answer

It restarts the servers.

Answer

It increases system logs.

Question 6

What should be done after an incident is resolved?

Accepted Answer

Document the lessons learned and update plans

Answer

Forget the incident.

Answer

Shut down all systems.

Answer

Erase the logs.

Question 7

What is an Intrusion Detection System (IDS)?

Accepted Answer

A system that detects unauthorized activity

Answer

A data backup tool.

Answer

A secure login method.

Answer

A spam filter.

Question 8

What is the goal of the eradication phase?

Accepted Answer

To remove malware and fix vulnerabilities

Answer

To shut down the network.

Answer

To block users.

Answer

To delete backups.

Question 9

Why are incident response plans tested regularly?

Accepted Answer

To ensure preparedness and effectiveness

Answer

To delay future responses.

Answer

To avoid compliance checks.

Answer

To reduce system uptime.