Access Control Incident Response Quiz

What is an access control incident?

• When authorized users access systems

• When unauthorized users access systems, data, or resources

• When systems are updated regularly

• When data is backed up securely

What is one of the benefits of following incident response protocols?

• It ensures non-compliance

• It supports compliance with regulations

• It increases the risk of breaches

• It eliminates the need for monitoring

What is the purpose of preserving evidence in incident response?

• To ensure evidence is unavailable

• To support investigations and potential legal action

• To increase the risk of data loss

• To delay response time

What tools are used for detecting unusual activity in access control incidents?

• Word processors

• Security Information and Event Management (SIEM) systems

• Spreadsheet software

• Presentation tools

What is an example of unusual activity detected by SIEM systems?

• Regular login attempts

• Login attempts from unknown locations

• Scheduled software updates

• Routine data backups

What is the importance of compliance in incident response?

• It is irrelevant to incident response

• It supports adherence to regulations

• It complicates the response process

• It delays evidence preservation

What is the outcome expected by the end of the lesson for IT staff?

• To ignore unauthorized access incidents

• To understand protocols for responding to unauthorized access incidents

• To develop new software applications

• To create marketing strategies

Which action is suggested to contain a breach?

• Increase user privileges

• Disable compromised user accounts

• Share passwords with trusted users

• Ignore the breach

What is included in the post-incident review?

• Timeline of events

• Increase in user privileges

• Deletion of all data

• Ignoring the incident

What is the role of reporting in post-incident review?

• Submit incident reports to compliance officers

• Ignore the incident

• Increase system vulnerabilities

• Share data with unauthorized users