312-39 · Question #175
Mike is an incident handler for PNP Infosystems Inc. One day, there was a ticket raised regarding a handling, at one stage, he has performed incident analysis and validation to check whether the incid
The correct answer is C. Incident Triage. The stage of incident handling that involves incident analysis and validation to determine if the incident is a true incident or a false positive is known as Incident Triage. This stage is critical as it helps in prioritizing incidents based on their severity, impact, and urgency
Question
Mike is an incident handler for PNP Infosystems Inc. One day, there was a ticket raised regarding a handling, at one stage, he has performed incident analysis and validation to check whether the incident is a true incident or a false positive. Identify the stage in which he is currently in.
Exhibit
Options
- APost-Incident Activities
- BIncident Recording and Assignment
- CIncident Triage
- DIncident Disclosure
How the community answered
(57 responses)- A2% (1)
- B4% (2)
- C93% (53)
- D2% (1)
Explanation
The stage of incident handling that involves incident analysis and validation to determine if the incident is a true incident or a false positive is known as Incident Triage. This stage is critical as it helps in prioritizing incidents based on their severity, impact, and urgency. The process of triage typically includes an initial assessment to confirm the validity of an incident, categorize its type, and determine the appropriate response. process, which includes the triage stage as a key component12. This is further supported by the NIST framework, which details the stages of incident response, including detection and analysis, where triage is a fundamental activity1. The Certified SOC Analyst (CSA) training also emphasizes the importance of incident triage in the overall security operations center (SOC) workflow3.
Topics
Community Discussion
No community discussion yet for this question.