Studio - U3 - LO4-4.1 Responding to an incident

What is the purpose of using a logging system in response to a security incident?

• To prevent future incidents

• To record what has happened and learn lessons for the future

• To punish the responsible staff

• To increase the workload of the staff

What must all staff be aware of in the event of a security incident?

• Their role in ensuring everything is completed accurately and in line with the procedure

• How to blame others for the incident

• How to avoid responsibility

• How to ignore the incident

What is the lesson objective mentioned in the document?

• To understand the basics of computer programming

• To describe and explain the required response to a cyber security incident

• To learn about different types of malware

• To understand network protocols

How do people typically respond to adversity during a security incident?

• Everyone reacts the same way.

• People react differently from how you expect.

• People always panic.

• People always remain calm.

What might happen to someone you thought would be strong during a security incident?

• They will always take charge.

• They may lose their nerve.

• They will always panic.

• They will always remain calm.

What should be ensured during a security incident?

• Everyone should panic.

• Everyone should focus on what they have to do and what needs to be done.

• Everyone should ignore the incident.

• Everyone should wait for instructions.

What is one of the responsibilities during or after a security incident?

• Ignoring the incident

• Shutting down the system to prevent damage

• Continuing normal operations

• Leaving the premises immediately

Why is it important for team members to know what they have to do and when during a security incident?

• To ensure they carry out their responsibilities correctly

• To confuse the intruder

• To avoid any work

• To increase the workload

Who should be informed during or after a security incident?

• Customers

• Competitors

• Appropriate personnel such as supervisors and managers

• Media

What is the first step to take if relevant people are unavailable during a security incident?

• Ignore the incident

• Find out who is next in line to meet their responsibilities

• Wait for the relevant people to become available

• Contact the police immediately