NSE Incident Response & Recovery Procedures

Question 1

What is the first step in the incident response process?

Accepted Answer

Identification

Answer

Recovery

Answer

Containment

Answer

Eradication

Question 2

Which team handles security incidents in an organization?

Accepted Answer

Incident Response Team

Answer

Customer Support

Answer

Sales Team

Answer

HR Department

Question 3

What is the purpose of containment in incident response?

Accepted Answer

To limit the impact of the incident

Answer

To notify users

Answer

To clean the system

Answer

To generate reports

Question 4

Which phase involves removing the root cause of an incident?

Accepted Answer

Eradication

Answer

Identification

Answer

Containment

Answer

Recovery

Question 5

What happens during the recovery phase?

Accepted Answer

Restoring affected systems to normal

Answer

Identifying threats

Answer

Removing users

Answer

Encrypting data

Question 6

Which document outlines how to respond to security incidents?

Accepted Answer

Incident response plan

Answer

Business plan

Answer

Disaster recovery plan

Answer

Marketing plan

Question 7

What is post-incident analysis?

Accepted Answer

Root cause identification

Answer

Legal compliance

Answer

Disabling security

Answer

User survey

Question 8

Which of the following is an example of an incident?

Accepted Answer

Malware infection

Answer

New employee onboarding

Answer

Routine backup

Answer

Software installation

Question 9

Why are backups important in recovery?

Accepted Answer

They help restore lost or corrupted data

Answer

They increase system performance.

Answer

They prevent phishing attacks.

Answer

They encrypt all data.