Chapter 9: Incident Management Readiness
Practice Question Set 1
Q. 1
Answer: C. An incident response plan
Explanation: An incident response plan includes a detailed procedure to handle an incident. It also includes the detailed roles and responsibilities of different teams for handling the incident. A security breach can best be handled using an incident response plan. BCPs and DRPs will be applicable only if an incident becomes a disaster and an alternative site needs to be activated. A change management plan is used to manage changes and does not directly impact the handling of a security breach.
Q. 2
Answer: A. To check the facility access logs
Explanation: The first step should be to check the facility access logs and determine the number of employees in the facility. They should be evacuated on an emergency basis. The safety of human life always comes first. The other options are secondary actions.
Q. 3
Answer: B. Installing a packet filtering firewall...
