Тест на реагування на інциденти

What is an information security incident?

• Scheduled update of security systems

• Violation of security policy that may lead to data leakage

• Installation of antivirus software

• Network infrastructure check

What is the first step when detecting a security incident?

• Notify IT department staff

• Stop the entire system

• Analyze and classify the incident

• Restore from backup

Which of the following incidents is considered the most serious for information security?

• Virus attack

• Data leakage of clients

• Delay in software updates

• Installation of a firewall

What actions are included in responding to a security incident?

• Isolation of affected systems

• Identifying the source of the incident

• Restoring normal operations

• All of the above

What analysis method is used to determine the scale of the incident?

• Logging and monitoring

• Installing patches

• Encrypting data

• Notifying users

What is 'forensics' in the context of incident response?

• Data recovery technology

• Vulnerability search method

• Process of collecting and analyzing evidence of the incident

• Attack warning system

What is 'forensics' in the context of incident response?

• Data recovery technology

• Vulnerability search method

• Process of collecting and analyzing evidence of an incident

• Attack prevention system

What stage should follow the elimination of an incident?

• Restoration of system operation

• Training of employees

• Incident analysis and documentation

• Updating antivirus software

What role do security policies play in preventing incidents?

• Restrict access to confidential information

• Prevent attacks

• Define standards for data protection

• All of the above

What is a key element of an incident response plan?

• Waiting for results

• Quickly informing all stakeholders

• Establishing new programs

• Holding general meetings