Incident Response Process Quiz

Sophia, a network administrator at a large corporation, noticed an unusual activity on the company's network. In this context, how would you define a security incident?

• An intentional action by Priya, another employee, to harm the company's network or data

• An unintentional action by Aria, another employee, that causes damage to the network systems

• An event that violates a security policy and may or may not have adverse effects on the corporation's ability to proceed with normal business

• An event that has no impact on the corporation's ability to proceed with normal business

Aria, Isla, and Arjun are discussing about different types of intrusion attempts. They are trying to identify an example of an external intrusion attempt. Which of the following scenarios would be an example of an external intrusion attempt?

• Tools used by a hacker to disrupt the online services of their school, compromise student data, or hurt the school's reputation

• Intentional actions by a hacker who is not a student or staff of their school in an attempt to exploit the school's network vulnerabilities

• Intentional actions by a student to harm the school's network or data

• Unintentional actions by a student that cause damage to the school's network systems

Aiden, David, and Daniel are part of a cybersecurity team at a large corporation. What is the purpose of their incident response process when a security breach occurs?

• To collect data to be used in the prosecution of the threat actor

• To define what is considered an incident

• To mitigate the damage of an incident

• All of the above

During a cyber attack on the school's computer system, who is designated as the first responder in the incident response process?

• Principal Harper

• IT support team lead by Samuel

• The person responsible for handling the response to the incident, Abigail

• Human resources department

Priya, Lily, and William are part of a cybersecurity team at a large corporation. They are discussing the company's incident response process. According to them, what should this process provide?

• A detailed outline of steps to efficiently and effectively handle an incident while mitigating its effects

• An explanation of how and to whom an incident should be reported

• All of the above

• A legally reviewed and approved plan

During a cybersecurity drill at their school, Grace, Maya, and Ethan are tasked with setting up an incident response process. What should be fully supported by the school's senior management and administration for their task to be successful?

• Redundant storage

• Forensic equipment

• All of the above

• Camera equipment

Daniel, Mia, and Evelyn are discussing the goal of unethical gathering of competitive information in a business scenario. According to them, what could be the primary goal of such activities?

• To obtain proprietary information in order to obtain a competitive advantage or steal clients

• To harm an organization or profit from access to an organization's resources

• To disrupt company business and compromise data

• To leave network systems vulnerable to attack

Aria, Charlotte, and Grace are working in a cybersecurity firm. They noticed an external intrusion attempt in their company's system. What could be the intent of the threat actor behind this intrusion?

• To disrupt the company's business and compromise data

• To obtain proprietary information in order to gain a competitive advantage or steal clients

• All of the above

• To harm the organization or profit from access to the organization's resources

Ethan detected a potential security breach in the company's network. What action should Ethan take?

• All of the above

• Implement the appropriate response

• Collect all data relative to the incident

• Notify his manager, William, immediately

Aria, Arjun, and Benjamin are working in a software company. When should they notify the management if they detect a security incident in their project?

• Only if the incident has adverse effects on the company's ability to proceed with normal business

• After the incident response process is completed

• At the discretion of the first person who detected the incident

• As soon as the incident is detected