1.
What happens in the post-incident activity phase?
2.
What is an Indicator of Compromise (IoC)?
3.
What’s a key output of a “lessons learned” meeting?
4.
What should be done after restoring systems in the recovery phase?
5.
A proper incident response plan should include:
6.
What is the most overlooked but critical phase in the incident response lifecycle?
7.
Which phase involves identifying the root cause and removing the threat completely?
8.
Which one is NOT a goal of the incident response process?
9.
Which tool is commonly used in the detection phase?
10.
What is the primary goal of security incident management?
11.
Why are backups important during incident response?
12.
What is the goal of containment during incident response?
13.
What does the Preparation phase primarily focus on?
14.
What should be validated during the recovery phase?
15.
Which is the first phase in the NIST Incident Response Lifecycle?
16.
Which of the following best defines a cybersecurity impact assessment?
17.
What is the role of an Incident Response Team (IRT)?
Thank you for the Quiz, Kindly check your email for the result.
Good Luck!