CERTIFIED-IN-CYBERSECURITY · Question #658
Which of the following terms refers to the process of identifying, analyzing, and evaluating security incidents?
The correct answer is B. Incident response. Incident response (IR) is the structured process of detecting, containing, analyzing, and recovering from security incidents. The IR lifecycle typically includes preparation, identification, containment, eradication, recovery, and lessons learned. Risk assessment evaluates…
Question
Which of the following terms refers to the process of identifying, analyzing, and evaluating security incidents?
Options
- ARisk assessment
- BIncident response
- CIntrusion detection
- DBusiness impact analysis
How the community answered
(67 responses)- A1% (1)
- B93% (62)
- C4% (3)
- D1% (1)
Explanation
Incident response (IR) is the structured process of detecting, containing, analyzing, and recovering from security incidents. The IR lifecycle typically includes preparation, identification, containment, eradication, recovery, and lessons learned. Risk assessment evaluates potential threats before they occur. Intrusion detection (IDS) passively monitors for threats in real time but does not analyze or evaluate incidents holistically. Business impact analysis (BIA) focuses on the effect of disruptions on business operations, not on responding to security events.
Topics
Community Discussion
No community discussion yet for this question.