Crisis Communication

5 minutes 5 Questions

Crisis Communication is a vital component of Business Continuity and Disaster Recovery planning, which focuses on managing communication during and after a crisis or emergency situation. Effective crisis communication is essential to protect a company's reputation, maintain stakeholder trust, and e…

Test mode:

Exam (Timed)

Practice (With explanations)

Start practice test

Question 1

You discover a vulnerability in your company's software that can lead to unauthorized data access. What should you include in your communication to software users?

A list of other companies that have faced similar vulnerabilities Detailed technical analysis of the vulnerability's algorithms Description of the vulnerability, affected software versions, and mitigation steps Timeline of events leading to the vulnerability discovery

Correct Answer: Description of the vulnerability, affected software versions, and mitigation steps

Crisis communication to users about a software vulnerability should include a clear description of the vulnerability, the affected software versions, and recommended mitigation steps. Detailed technical analysis, comparisons to other companies, and internal discussions aren't relevant in this context and can be counterproductive.

Question 2

During a data breach, you are tasked with communicating the crisis to company stakeholders. What is the most appropriate approach?

Overemphasize the breach's severity to create a sense of urgency Brief stakeholders on the issue, potential impacts, mitigations, and updates Ignore stakeholder inquiries to focus on resolving the breach Downplay the breach and assure stakeholders there's nothing to worry about

Correct Answer: Brief stakeholders on the issue, potential impacts, mitigations, and updates

The best approach to crisis communication is to provide accurate, clear, and relevant information to stakeholders about the issue, potential impacts, mitigation measures, and updates of any major changes or findings. Downplaying the breach, ignoring stakeholders, or overemphasizing its severity can damage the company's credibility and trust level.

Question 3

As the Security Specialist at your company, you have discovered a ransomware attack affecting critical systems. What should be included in your initial communication to the leadership team?

Amount demanded by the attacker to restore systems access Identity of the attacker and their motivation Scope, potential impacts, mitigation strategies, and plan of action Detailed technical analysis of the attack

Correct Answer: Scope, potential impacts, mitigation strategies, and plan of action

During a crisis communication, the initial priority is to provide accurate information on the scope of the issue, potential impacts, mitigation strategies, and a plan of action. Discussing attacker identity, motivations, and demands or providing detailed technical analyses aren't the focus during the initial communication. Promise of a particular resolution time can create false expectations.

Secure Your Security+ SY0-701

1,200+ questions across all 5 SY0-701 domains

Crisis Communication

Guide on Crisis Communication: Importance, Functioning & Tips for Exam

CompTIA Security+ - Crisis Communication Example Questions

Question 1

Question 2

Question 3

Secure Your Security+ SY0-701