CISSP-ISSMP Question #109: Real Exam Question with Answer & Explanation

The correct answer is B: Technical representative. Technical representative creates forensic backups of the systems that are the focus of the incident, and provides valuable information about the configuration of the network and target system. Answer option C is incorrect. Lead investigator acts as the manager of the computer sec

Security Operations Management

Question

Which of the following representatives of incident response team takes forensic backups of the systems that are the focus of the incident?

Options

ALegal representative
BTechnical representative
CLead investigator
DInformation security representative

Explanation

Technical representative creates forensic backups of the systems that are the focus of the incident, and provides valuable information about the configuration of the network and target system. Answer option C is incorrect. Lead investigator acts as the manager of the computer security incident response team. Answer option A is incorrect. Legal representative looks after the legal issue and ensures that the investigation process does not break any law. Answer option D is incorrect. Information security representative informs about the security safeguards that may affect their ability to respond to the incident.

Topics

#Incident Response#Forensic Data Collection#Incident Response Team Roles#Data Preservation

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSMP Practice Browse All CISSP-ISSMP Questions