A company's cyber security team performed a phishing simulation campaign for employees and performed security awareness trainings to affected personal. According to NIST.SP800-61, at which phase of…

The correct answer is C. preparation phase. The preparation phase involves activities focused on preparing and improving an organization's ability to respond effectively to potential security incidents. This includes actions such as conducting training, exercises, and simulations for employees to enhance their awareness…

Submitted by carlos_mx· Mar 6, 2026Security Policies and Procedures

Question

A company's cyber security team performed a phishing simulation campaign for employees and performed security awareness trainings to affected personal. According to NIST.SP800-61, at which phase of incident response is this action?

Options

Apost-incident activity phase
Bdetection and analyze phase
Cpreparation phase
Deradication and recovery phase

How the community answered

(41 responses)

A
7% (3)
B
2% (1)
C
88% (36)
D
2% (1)

Explanation

The preparation phase involves activities focused on preparing and improving an organization's ability to respond effectively to potential security incidents. This includes actions such as conducting training, exercises, and simulations for employees to enhance their awareness and readiness to recognize and respond to security threats like phishing attacks. The goal is to proactively strengthen the organization's security posture and readiness to mitigate potential

Topics

#NIST SP 800-61#Incident response#Security awareness training#Phishing simulation

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice