Security Operations (ch 16-19) Flashcards
1
Q
What are the steps of incident response?
A
The CIB lists the steps as:
Detection Response Mitigation Reporting Recovery Remediation Lessons Learned
2
Q
When is it acceptable to include your opinion about the causes of an incident in an incident report?
A
Only when you clearly delineate opinion from fact in your report
3
Q
You are selecting an alternate processing facility for your organization and must select an approach that allows recovery site activation within six hours. What site should you choose?
A
Hot sites are the only site capable of activation within the required six-hour timeframe.
