Security related breaches are assessed and contained through which of the following?

Question

Options

• AThe IT support team.
• BA forensic analysis.
• CIncident response
• DPhysical security team.

• A
  15% (6)
• B
  8% (3)
• C
  72% (28)
• D
  5% (2)

Explanation

Incident response (C) is the structured process organizations use to assess, contain, and recover from security breaches. It follows a defined lifecycle - preparation, identification, containment, eradication, recovery, and lessons learned - making it the standard framework for handling breaches end-to-end.

• A (IT support team) is wrong because IT support handles everyday technical issues like helpdesk tickets, not coordinated security breach management.
• B (Forensic analysis) is a component that may occur within an incident response process (to determine root cause after containment), but it is not the overarching process itself.
• D (Physical security team) addresses physical access control (locks, cameras, badges) and is not responsible for cyber or data breach response.

Memory tip: Think of IR = I Respond - when a breach happens, the Incident Response team is the one that runs the show, from detection through recovery. Forensics and other teams may assist, but IR owns the process.

No community discussion yet for this question.