Incident Response

What is the primary goal of an Incident Response Plan?

• Ignore incidents

• Increase recovery time

• Enhance user experience

• Minimize damage

Who is responsible for preparing an incident report?

• Forensic Technician

• Lead Investigator

• Director

• Legal Advisor

What is an anomaly in the context of incident response?

• A normal event

• A violation of security policy

• Something abnormal or peculiar

• A successful incident response

Which of the following is NOT a common attack vector?

• Email

• Web

• Impersonation

• Data Encryption

What is the role of the Response Handler?

• To secure the crime scene

• To analyze evidence

• To provide legal advice

• To report to the Director

What is the first phase of the Incident Response Life Cycle?

• Recovery

• Containment

• Detection

• Preparation

What should be maintained during evidence handling?

• No communication with law enforcement

• Minimal documentation

• A flexible approach

• A strict chain of custody

Which team is responsible for incident response?

• Incident Response Team (IRT)

• Finance Department

• Marketing Team

• Human Resources

What is the purpose of a log retention policy?

• To delete old logs

• To keep all logs indefinitely

• To understand normal behaviors

• To maintain evidence for incidents

What is the main responsibility of the Legal Advisor in an incident response?

• To provide legal guidance

• To collect evidence

• To manage the incident response team

• To analyze malware