nerdexam
EC-Council

312-50V10 · Question #749

What is the process of logging, recording, and resolving events that take place in an organization?

The correct answer is A. Incident Management Process. Incident Management is the formal ITIL/security operations process responsible for logging, recording, and resolving events and incidents within an organization to restore normal service as quickly as possible.

Information Security and Ethical Hacking Fundamentals

Question

What is the process of logging, recording, and resolving events that take place in an organization?

Options

  • AIncident Management Process
  • BSecurity Policy
  • CInternal Procedure
  • DMetrics

How the community answered

(13 responses)
  • A
    92% (12)
  • C
    8% (1)

Why each option

Incident Management is the formal ITIL/security operations process responsible for logging, recording, and resolving events and incidents within an organization to restore normal service as quickly as possible.

AIncident Management ProcessCorrect

Incident Management Process is specifically defined in frameworks like ITIL and NIST SP 800-61 as the structured workflow for detecting, recording, classifying, and resolving incidents. It encompasses the full lifecycle from initial logging of an event through investigation and resolution, ensuring continuity and accountability.

BSecurity Policy

A Security Policy defines the rules and requirements for protecting organizational assets, not the operational process of logging and resolving events.

CInternal Procedure

Internal Procedures are step-by-step instructions for routine tasks and do not specifically describe the end-to-end lifecycle of event management and resolution.

DMetrics

Metrics are quantitative measurements used to evaluate performance or security posture, not a process for managing events.

Concept tested: Incident management process definition and scope

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf

Topics

#incident management#event logging#security operations#ITIL

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice