Incident Management Training

Which of the following best describes “Incident Management” in a banking environment?

• A set of processes for detecting and preventing cybercrime.

• The structured approach to identifying, managing, and resolving service disruptions.

• The process of conducting quarterly IT audits.

• A security awareness program for employees.

Which term refers to the ability to absorb, adapt, and recover from disruptions while maintaining essential operations?

• Incident Handling

• Cybersecurity

• Resilience

• Disaster Testing

In the Incident Management Lifecycle, which phase involves assigning severity and urgency to incidents?

•  Identification

• Prioritization

• Closure

• Logging

What is the main objective of the “Post-Incident Review” (PIR)?

• To punish the team responsible for the incident.

• To document lessons learned and improve processes.

• To report incidents to law enforcement.

• To restore services after a disruption.

Which of these is a key metric for measuring resilience in incident management?

• RPO (Recovery Point Objective)

• MTTR (Mean Time to Respond/Recover)

• CapEx ratio

• ROI (Return on Investment)

In the context of First Response, who is typically the first responder in a bank’s IT environment?

• CEO

• SOC analyst or IT helpdesk staff

• Branch manager

• Internal audit officer

Which of the following is a “Do” for a first responder?

• Delete suspicious files immediately.

• Share incident details with a friend for advice.

• Preserve evidence for investigation.

• Wait until the next day to escalate.

Which of the following is a “Don’t” for a first responder?

• Isolate affected systems.

• Document actions taken.

• Escalate promptly.

• Attempt unapproved fixes that may destroy evidence.

In incident detection, which tool category provides centralized visibility of security events?

• SIEM

• CRM

• ERP

• CMS

Which statement best describes the relationship between Incident Management and Incident Response?

• Incident Response is broader than Incident Management.

• Incident Management is a subset of Incident Response.

• Incident Response is a subset of Incident Management.

• They are completely unrelated.