Back to Security Operations

Incident Response Management

5 minutes 5 Questions

Incident Response Management involves the identification, mitigation, and prevention of security incidents. It is a crucial aspect of security operations, allowing organizations to swiftly detect and react to cyber attacks, system vulnerabilities, and data breaches. A comprehensive Incident Respons…

Test mode:
Start practice test
CompTIA Security+ - Incident Response Management Example Questions

Test your knowledge of Incident Response Management

Question 1

You are the IT security manager at a company that recently detected a malware attack. What is the best information to include in the incident report?

Correct Answer: The type of malware, affected systems, mitigation steps taken, and recommendations

In an incident report, it's crucial to include specific information about the incident, such as the type of malware, affected systems, and the actions taken to mitigate the issue. The other options consist of unrelated or inappropriate information.

Question 2

An employee receives a phishing email and accidentally downloads malware onto their computer. What should you prioritize in dealing with this type of security event?

Correct Answer: Contain the malware and investigate the affected system

The main priority is to contain the malware and investigate its origin. It is important to understand how the malware spreads and its effects on the system. Identifying the sender, firing the employee, upgrading systems, doing nothing, and blaming others are not effective or appropriate immediate responses.

Question 3

During a DDoS attack, your organization's website experiences a significant increase in traffic. Which mitigation strategy should you employ?

Correct Answer: Implement traffic filtering and adjust system resource allocation

The correct strategy during a DDoS attack is to filter malicious traffic from legitimate traffic and adjust resources to accommodate increased demand. Disconnecting the network, increasing traffic through advertisements, temporarily disabling the website, and increasing bandwidth do not directly address the issue.

More Incident Response Management questions
14 questions (total)
Start 14 question test