nerdexam
(ISC)2

CGRC · Question #629

The mitigation of violations of security policies and recommended practices. Response:

The correct answer is A. Incident Handling. Incident Handling is the process of responding to and mitigating violations of security policies and recommended practices. It involves a structured approach to manage security breaches from detection through recovery.

Compliance Maintenance

Question

The mitigation of violations of security policies and recommended practices. Response:

Options

  • AIncident Handling
  • BEpisode Handling
  • CAppointment Handling
  • DAppendage Handling

How the community answered

(50 responses)
  • A
    92% (46)
  • B
    4% (2)
  • C
    2% (1)
  • D
    2% (1)

Why each option

Incident Handling is the process of responding to and mitigating violations of security policies and recommended practices. It involves a structured approach to manage security breaches from detection through recovery.

AIncident HandlingCorrect

Incident Handling, also known as incident response, is the systematic process designed to detect, respond to, and mitigate the impact of security incidents or violations of security policies and recommended practices. It encompasses steps like containment, eradication, recovery, and post-incident analysis to restore normal operations and prevent recurrence.

BEpisode Handling

'Episode Handling' is not a recognized technical term within cybersecurity for mitigating security violations.

CAppointment Handling

'Appointment Handling' is a term related to scheduling and has no relevance to cybersecurity or mitigating security violations.

DAppendage Handling

'Appendage Handling' is not a recognized technical term within cybersecurity for mitigating security violations.

Concept tested: Incident response terminology

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf

Topics

#Incident Handling#Security Policy Violations#Remediation

Community Discussion

No community discussion yet for this question.

Full CGRC Practice