GIAC
GCIH · Question #373
Which of the following is ALWAYS a good guideline for incident response processes?
Sign in or unlock GCIH to reveal the answer and full explanation for question #373. The question stem and answer options stay visible for context.
Incident Response & Cyber Kill Chain
Question
Which of the following is ALWAYS a good guideline for incident response processes?
Options
- AInformation regarding the incident should be provided to anyone who asks
- BRequire the incident handler to work alone in order to preserve evidence integrity
- CInformation regarding the incident should only be known by the primary incident responder
- DIf resources allow, assign a helper to the primary incident responder
Unlock GCIH to see the answer
You've previewed enough free GCIH questions. Unlock GCIH for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#IR best practices#team coordination#evidence integrity#incident handler roles