GIAC
GCIH · Question #475
GCIH Question #475: Real Exam Question with Answer & Explanation
Sign in or unlock GCIH to reveal the answer and full explanation for question #475. The question stem and answer options stay visible for context.
Incident Response & Cyber Kill Chain
Question
Why should you inform incident handling team members in advance of their joining the team that they may be required to testify in a court of law?
Options
- ABecause most cases eventually end up in court
- BTo make sure they understand that it is a requirement that could follow them for several years
- CTo verify their abilities to hold up under cross-examination
- DBecause US Code Section 1030 requires that all incident handlers receive such notification
Unlock GCIH to see the answer
You've previewed enough free GCIH questions. Unlock GCIH for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#legal proceedings#incident handler responsibilities#court testimony#incident documentation