Understanding Incident Response Fundamentals

What is the primary purpose of an Incident Response Plan?

• To ensure all incidents are reported to the media

• To minimise the impact of incidents on an organisation

• To increase the number of incidents for practice

• To eliminate the need for cybersecurity measures

Which of the following is a key component of an Incident Response Plan?

• A list of all employees' personal phone numbers

• A detailed inventory of office furniture

• Procedures for incident detection and analysis

• A schedule for office cleaning

What is the first step in the incident response process?

• Eradication

• Containment

• Identification

• Recovery

Which method is commonly used for incident classification?

• Alphabetical order

• Severity levels

• Colour coding

• Random selection

Why is communication important during an incident?

• To confuse the attackers

• To ensure all stakeholders are informed and coordinated

• To increase the workload of the IT team

• To delay the response process

Who should be informed first when an incident is detected?

• The media

• The incident response team

• The general public

• The competitors

What is a legal consideration during incident response?

• Ignoring data protection laws

• Ensuring compliance with privacy regulations

• Sharing all data with third parties

• Destroying evidence immediately

Which of the following is an ethical consideration in incident response?

• Blaming employees without evidence

• Protecting the confidentiality of affected individuals

• Publicly shaming the attackers

• Selling incident data to the highest bidder

What is the role of an Incident Response Team?

• To create incidents for testing purposes

• To manage and mitigate incidents effectively

• To replace the IT department

• To handle only physical security issues

Which of the following is NOT a method of incident classification?

• By type of attack

• By time of day

• By impact on operations

• By source of attack