Chapter 10: Incident Management Operations
Practice Question Set 1
Q. 1
Answer: A. Minimizing the impact of incidents
Explanation: Continuous monitoring helps to identify abnormalities in real time. This will help an information security manager take corrective action on an immediate basis and thereby control the impact of the incident. The other options are not the prime objectives of continuous monitoring.
Q. 2
Answer: D. The ability to handle stress amidst chaos
Explanation: The ability to stay calm and make appropriate decisions in stressful situations is the most important attribute of an incident handler. Any decision made by an individual who is unable to stay calm under pressure may not be in the best interests of the organization. The other options are secondary attributes of an incident handling team.
Practice Question Set 2
Q. 1
Answer: B. Applications being exposed to new viruses during the intervening week
Explanation: As a prudent practice...