nerdexam
Dell-EMC

D-CSF-SC-01 · Question #79

An organization has a policy to respond "ASAP" to security incidents. The security team is having a difficult time prioritizing events because they are responding to all of them, in order of…

The correct answer is C. Classification of incidents. See the full explanation below for the reasoning.

Question

An organization has a policy to respond "ASAP" to security incidents. The security team is having a difficult time prioritizing events because they are responding to all of them, in order of receipt. Which part of the IRP does the team need to implement or update?

Options

  • AScheduling of incident responses
  • B`Post mortem' documentation
  • CClassification of incidents
  • DContainment of incidents

How the community answered

(15 responses)
  • A
    7% (1)
  • B
    7% (1)
  • C
    73% (11)
  • D
    13% (2)

Community Discussion

No community discussion yet for this question.

Full D-CSF-SC-01 Practice