FedRAMP Continuous Monitoring & Incident Response

Question 1

What is the purpose of continuous monitoring in FedRAMP?

Accepted Answer

Ongoing security assessment

Answer

Only during audits

Answer

Is optional

Answer

Delays response

Question 2

What is an incident response plan?

Accepted Answer

Plan to manage security incidents

Answer

A marketing strategy

Answer

A financial report

Answer

A user manual

Question 3

Why is timely incident detection critical?

Accepted Answer

Minimizes damage and speeds recovery

Answer

Causes panic

Answer

Is optional

Answer

Delays mitigation

Question 4

Who should be involved in incident response?

Accepted Answer

IT, management, and security

Answer

Only IT staff

Answer

Only management

Answer

External vendors only

Question 5

What is the role of logging in continuous monitoring?

Accepted Answer

Records activities for detection

Answer

Slows systems

Answer

Is unnecessary

Answer

Only for compliance

Question 6

How often should incident response plans be tested?

Accepted Answer

Regularly tested

Answer

Never

Answer

Only after incidents

Answer

Once only

Question 7

Why is communication important during incident response?

Accepted Answer

Coordinates actions and informs

Answer

Causes confusion

Answer

Is optional

Answer

Delays response

Question 8

What is containment in incident response?

Accepted Answer

Limit impact and spread

Answer

Ignoring incidents

Answer

Immediately shutting down systems

Answer

Only notifying management

Question 9

How does post-incident analysis improve security?

Accepted Answer

Identifies causes and strengthens defenses

Answer

Is a waste of time

Answer

Only blames staff

Answer

Is optional