In which of the following phases of the incident handling and response (IH&R) process is the identified security incidents analyzed, validated, categorized, and prioritized?

The correct answer is A. Incident triage. Incident triage is the phase in the Incident Handling and Response (IH&R) process where identified security incidents are analyzed, validated, categorized, and prioritized. This step is crucial for determining the severity of incidents and deciding on the order in which they…

Incident Handling and Response Process

Question

Options

AIncident triage
BIncident recording and assignment
CContainment
DNotification

How the community answered

(59 responses)

A
92% (54)
B
5% (3)
C
2% (1)
D
2% (1)

Explanation

Incident triage is the phase in the Incident Handling and Response (IH&R) process where identified security incidents are analyzed, validated, categorized, and prioritized. This step is crucial for determining the severity of incidents and deciding on the order in which they should be addressed. During triage, incident handlers assess the impact, urgency, and potential harm of an incident to prioritize their response efforts effectively. This ensures that resources are allocated efficiently, and the most critical incidents are handled first. Incident recording and assignment involve logging incidents and assigning them to handlers, containment focuses on limiting the extent of damage, and notification involves informing stakeholders about the incident.

Topics

#incident triage#incident classification#IH&R process#incident prioritization

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice