ISC2 CC Business Continuity and Disaster Recovery 3

Question 1

What is the primary objective of incident response?

Accepted Answer

Minimizing the impact of security incidents and restoring operations

Answer

Incident response aims to contain and minimize the damage caused by security incidents while restoring normal operations as quickly as possible.

Question 2

Which phase of incident response involves identifying what happened and its scope?

Accepted Answer

Detection and Analysis

Answer

The detection and analysis phase involves identifying security events, determining if they are incidents, and understanding the scope of impact.

Question 3

What is the purpose of the containment phase in incident response?

Accepted Answer

To stop the spread of the incident and limit further damage

Answer

Containment focuses on stopping the spread of an incident to prevent additional damage while preserving evidence for analysis.

Question 4

What is a tabletop exercise in business continuity planning?

Accepted Answer

A discussion-based exercise where participants walk through a hypothetical scenario

Answer

A tabletop exercise is a discussion-based session where stakeholders talk through responses to a hypothetical scenario without making actual system changes.

Question 5

Which step comes AFTER eradication in the standard incident response process?

Accepted Answer

Recovery

Answer

After eradicating the threat, the next step is recovery — restoring affected systems and verifying they are operating normally.

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test

ISC2 CC Business Continuity and Disaster Recovery 3