Exam 212-89 topic 1 question 62 discussion

Level One incidents are typically classified as critical incidents that demand immediate resolution due to their impact on the system's availability or performance.

A. Level One incident: Example: Single-user system compromise, such as a user's workstation infected with malware or phishing attack. B. Level Two incident: Example: Ransomware attack affecting several departments within an organization, causing disruption to critical systems and services. C. Level Three incident: Example: Large-scale DDoS (Distributed Denial of Service) attack targeting an organization's website or network infrastructure, resulting in widespread service outage and financial loss. D. Level Four incident: Example: A sophisticated nation-state cyber-attack targeting critical infrastructure, such as a cyber-attack on a country's power grid or financial system, with the potential to cause widespread chaos and national security implications.

A. Level One incident Incidents that require immediate attention and rapid response, such as Distributed Denial of Service (DDoS) attacks, are typically categorized as Level One incidents. In incident response frameworks, different levels are assigned based on the severity and urgency of the incident. Level One incidents are considered the most critical and require immediate actions to mitigate the impact and restore normal operations.

according to common incident severity levels 1-5, SEV 1 - A critical incident that affects a large number of users in production. SEV 2 - A significant problem affecting a limited number of users in production. SEV 3 - An incident that causes errors, minor problems for users, or a heavy system load. SEV 4 - A minor problem that affects the service but doesn't have a serious impact on users. SEV 5- A low-level deficiency that causes minor problems. answer should be level 1.

It’s CAT 2 correct, but it’s level 3. It goes from CAT 0, CAT 1 then CAT2 which is the third level.

According with Federal Agency Incident Categories is Level 2 not Level 3 incident