Cisco
210-255 · Question #55
210-255 Question #55: Real Exam Question with Answer & Explanation
The correct answer is C: leaders and managers. In incident response frameworks, leaders and managers are accountable for directing the containment, eradication, and recovery phases of incident handling.
Question
Which stakeholder group is responsible for containment, eradication, and recovery in incident handling?
Options
- Afacilitators
- Bpractitioners
- Cleaders and managers
- Ddecision makers
Explanation
In incident response frameworks, leaders and managers are accountable for directing the containment, eradication, and recovery phases of incident handling.
Common mistakes.
- A. Facilitators are responsible for coordinating communication and logistics across stakeholder groups during an incident, not for directing or executing containment, eradication, and recovery operations.
- B. Practitioners perform hands-on technical tasks during incident response but do not hold formal organizational accountability for directing the containment, eradication, and recovery phases.
- D. Decision makers are responsible for high-level strategic and policy determinations during a major incident, not for the operational management of containment, eradication, and recovery activities.
Concept tested. Incident response stakeholder roles in IR lifecycle phases
Reference. https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf
Community Discussion
No community discussion yet for this question.