exam questions

Exam CIS-SIR All Questions

View all questions & answers for the CIS-SIR exam

Exam CIS-SIR topic 1 question 25 discussion

Actual exam question from ServiceNow's CIS-SIR
Question #: 25
Topic #: 1
[All CIS-SIR Questions]

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security incident?

  • A. Post Incident Activity
  • B. Detection & Analysis
  • C. Preparation and Identification
  • D. Containment, Eradication, and Recovery
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
NokoNice
1 day, 17 hours ago
Selected Answer: D
Containment, Eradication, and Recovery
upvoted 1 times
...
Sazeka
2 months ago
Selected Answer: D
D correct, according to the Ebook of Security Incident Response ( Tokyo ) page 218
upvoted 1 times
...
sephereth
5 months, 1 week ago
Selected Answer: D
ebook p.218, Containment is the process of isolating the affected systems to prevent further damage. Eradication is the process of removing the cause of the incident from the affected systems. Recovery is the process of restoring the affected systems to their normal state. ebook p.221, ...drastrically reducing time to containment and providing enhanced vsibility of sercurity incidents...
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago