CSA
CCSK · Question #164
Which action is part of the containment phase of the incident response lifecycle?
The correct answer is C. Making considerations for data loss versus service availability. Containment: Taking systems offline. Considerations for data loss versus service availability. Ensuring systems don’t destroy themselves upon detection
Cloud Incident Response
Question
Which action is part of the containment phase of the incident response lifecycle?
Options
- AEvaluating infrastructure by proactive scanning and network monitoring, vulnerability assessments,
- BPlanning notification and coordination of activities
- CMaking considerations for data loss versus service availability
- DConfiguring and validating alerts
- EAnalyzing what happened
How the community answered
(30 responses)- B3% (1)
- C80% (24)
- D10% (3)
- E7% (2)
Explanation
Containment: Taking systems offline. Considerations for data loss versus service availability. Ensuring systems don’t destroy themselves upon detection
Topics
#incident response lifecycle#containment phase#data loss vs availability#incident handling
Community Discussion
No community discussion yet for this question.