Studio - U3 - LO4-4.2 Cyber Security Incident report

What is the purpose of logging the actions taken to resolve a security incident?

• To provide evidence for future approaches to similar instances

• To increase the complexity of the incident report

• To reduce the number of security incidents

• To avoid legal consequences

What do most organisations have to provide important information and identify key players during a security incident?

• A cyber security incident report

• A financial audit report

• A marketing strategy document

• A customer feedback form

What is the lesson objective mentioned in the document?

• To describe and explain the need for a cyber security incident report and what it should contain

• To understand the basics of computer programming

• To learn about network configurations

• To study the history of the internet

What is the purpose of a Cyber Security Incident Report?

• To document the details of a cyber security incident.

• To prevent future incidents from occurring.

• To identify the attackers involved in the incident.

• To provide a summary of all security measures in place.

Which of the following is NOT a category of incident mentioned in the Cyber Security Incident Report?

• Critical

• Significant

• Major

• Negligible

What should be included in the description of a cyber security incident?

• The title and date of the incident.

• The techniques used by the attackers.

• The cost of the incident.

• The type of attackers.

Which of the following is a lesson objective related to the Cyber Security Incident Report?

• To understand the types of attackers.

• To describe and explain the need for a cyber security incident report.

• To learn about the cost of incidents.

• To identify the impact of incidents.

Why is the date of a cyber security incident relevant?

• It helps in identifying the attacker.

• It can be cross-referenced to other events such as updating of patches or anti-malware software.

• It determines the severity of the incident.

• It is used to calculate the financial loss.

What should be included in the title of a cyber security incident report?

• The name of the IT manager.

• The title and date of the incident.

• The financial impact of the incident.

• The number of affected users.

What is the severity of an incident categorized as "critical"?

• Loss of access to the system for a few hours

• Lives could have been lost or critical system safety compromised

• Severe loss of reputation, disruption to services or financial loss

• Little impact on most of the system and system users