nerdexam
GIAC

GCIH · Question #766

What is the first decision point of an incident investigation?

The correct answer is C. Verification. Verification is the initial step where it is determined whether an incident has actually occurred and if it warrants a formal investigation. This involves confirming the facts and ensuring that the reported event qualifies as an incident needing investigation. After…

Incident Response & Cyber Kill Chain

Question

What is the first decision point of an incident investigation?

Options

  • ACriticality
  • BPreparation
  • CVerification
  • DDetection

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    88% (30)
  • D
    6% (2)

Explanation

Verification is the initial step where it is determined whether an incident has actually occurred and if it warrants a formal investigation. This involves confirming the facts and ensuring that the reported event qualifies as an incident needing investigation. After verification, the process typically moves to securing the scene, collecting evidence, and

Topics

#incident investigation#decision points#verification#incident response process

Community Discussion

No community discussion yet for this question.

Full GCIH Practice