ISC2 - Domain 2 - Incident Response

What term is sometimes used interchangeably with "incident management"?

• Business continuity

• Crisis Management

• Crisis response

• Safety management

What is the purpose of a red book in the context of business continuity?

• To be distributed to all employees

• To outline procedures for routine tasks

• To provide a backup copy of the business continuity plan

• To serve as a hard copy backup accessible outside the facility

Why are notification systems and call trees important in a business continuity plan?

• To alert personnel when the BCP is being enacted

• To disrupt emergency response agencies

• To exclude vendors and customers

• To focus solely on supply chain members

What is a key outcome of a Business Impact Analysis (BIA)?

• Identification of functions and dependencies

• Immediate effect on other areas of work

• Importance of customer service staff

• Transition to permanent office space

In the United States, what type of networks can be used to maintain essential activity during a severe cyberattack that affects communications?

• Commercial cell phone networks

• Hospital-specific networks

• Internet-based networks

• Military-grade networks

What is the first phase in the components of an incident response plan?

• Containment

• Detection & Analysis

• Post-Incident Activity

• Preparation

What is the primary distinction between business continuity planning (BCP) and disaster recovery planning (DRP)?

• BCP and DRP are interchangeable terms

• BCP focuses on emergency response personnel actions, while DRP restores IT and communications

• BCP ensures business sustainment, while DRP is about building security

• DRP is about restoring IT, while BCP focuses on business operations

Which of the following is very likely to be used in a disaster recovery (DR) effort?

• Anti-malware solutions

• Contract personnel

• Data backups

• Guard dogs

What is the purpose of the Executive Summary in a Disaster Recovery Plan?

• To list department-specific plans

• To offer a high-level overview of the plan

• To provide detailed technical guidance

• To serve as a checklist for critical team members