Which of the following is the BEST set of methods one may use to validate a system once operations have been restored during the Recovery phase of Incident Handling?

The correct answer is D. Follow test plans, use baseline documentation, and utilize business unit testing. Documented test plans, baseline performance or behavior, and business unit testing can be used to validate that a system is back online and behaving as it should.

Incident Response & Cyber Kill Chain

Question

Options

AEnsure the system boots, verify the applications start, and check network connectivity
BObtain legal sign-off, validate the system recovery, and obtain incident handler sign-off
CMonitor syslog activity, create IDS signatures, and review the firewall configuration
DFollow test plans, use baseline documentation, and utilize business unit testing

How the community answered

(27 responses)

A
4% (1)
B
4% (1)
C
15% (4)
D
78% (21)

Explanation

Documented test plans, baseline performance or behavior, and business unit testing can be used to validate that a system is back online and behaving as it should.

Topics

#incident recovery#baseline validation#IR lifecycle#system restoration

Community Discussion

No community discussion yet for this question.

Full GCIH Practice