Understanding Cyber Security Incidents

What is the primary goal of an incident response plan in cyber security?

• To prevent all cyber attacks

• To minimise the impact of security incidents

• To identify potential vulnerabilities

• To increase network speed

Which of the following is the first step in the incident response process?

• Eradication

• Containment

• Identification

• Recovery

What is the purpose of the containment phase in incident response?

• To eliminate the threat completely

• To gather evidence for legal proceedings

• To prevent the spread of the incident

• To restore normal operations

Which team is typically responsible for handling cyber security incidents?

• IT Support Team

• Incident Response Team

• Human Resources Team

• Marketing Team

What is a common tool used for detecting security incidents?

• Firewall

• Intrusion Detection System (IDS)

• Word Processor

• Spreadsheet Software

During which phase of incident response is a root cause analysis typically performed?

• Identification

• Containment

• Eradication

• Recovery

What is the main objective of the recovery phase in incident response?

• To document the incident

• To restore systems to normal operations

• To identify the attacker

• To improve network speed

Which of the following is a key component of an incident response plan?

• Marketing Strategy

• Communication Plan

• Sales Forecast

• Product Development Timeline

What is the purpose of the lessons learned phase in incident response?

• To punish the responsible parties

• To improve future incident response efforts

• To increase company profits

• To reduce employee workload

Which of the following is a common indicator of a security incident?

• Increased network speed

• Unauthorised access attempts

• Decreased employee productivity

• High customer satisfaction