What activities should occur during the preparation phase of incident handling? (Choose two)

The correct answer is A. Developing an incident response plan B. Training the incident response team. During the preparation phase of incident handling, organizations establish the foundation needed to respond effectively to future incidents. Developing an incident response plan (A) is correct because this phase is specifically about creating policies, procedures, and…

Cybersecurity Incident Response

Question

Options

ADeveloping an incident response plan
BTraining the incident response team
CDeleting outdated files
DReplacing outdated hardware

How the community answered

(42 responses)

A
95% (40)
C
2% (1)
D
2% (1)

Explanation

During the preparation phase of incident handling, organizations establish the foundation needed to respond effectively to future incidents. Developing an incident response plan (A) is correct because this phase is specifically about creating policies, procedures, and documentation before incidents occur. Training the incident response team (B) is correct because personnel must understand their roles and practice response procedures while there is no active incident demanding attention.

C (Deleting outdated files) and D (Replacing outdated hardware) are general IT maintenance tasks - they have no direct relationship to incident response readiness and belong to routine operations or asset management processes, not incident handling methodology.

Memory tip: Think "PREPARE = Plan + Practice." The preparation phase is about getting your people and playbooks ready - anything else is just housekeeping.

Topics

#Incident Response Phases#Preparation Phase#Incident Response Planning#Team Training

Community Discussion

No community discussion yet for this question.

Full 100-160 Practice