What is the objective of the preparation phase?

Establish incident response capabilities before a cybersecurity event occur

What is the objective of the Containment, Eradication, and Recovery phase?

Limit the spread of the incident, eliminate threats, restore operations

What is the objective of the Post-Incident Activity phase?

Learn from the incident to improve future response efforts.

What are the phases of the NIST Incident Response Life Cycle?

Prep, detect/analyze, contain, erad& recover, post-incident activity

What is the objective of the Detection and Analysis phase?

Identify and evaluate potential security incidents.

studbud

Bethania Yared: The NIST Incident Response Lifecycle

8 termsStudBud Administration

Imported from external platform

Flashcards8 cardsFPractice quizPHost liveL

Questions 8

Answers

1
Put the steps in order: Containe, Eradicate, and Recovery,Detect and Analyze, Post-Incident Activity, Preparation
2,4,3,1
3,1,4,2
1,4,2,3
4,2,1,3
2
Which is not a step of preparation?
Govern
object
Identify
protect
3
What is the objective of the preparation phase?
Learn from the incident to improve future response efforts.
Limit the spread of the incident, eliminate threats, restore operations
Identify and evaluate potential security incidents.
Establish incident response capabilities before a cybersecurity event occur
4
What is the objective of the Containment, Eradication, and Recovery phase?
Limit the spread of the incident, eliminate threats, restore operations
Establish incident response capabilities before a cybersecurity event occur
Identify and evaluate potential security incidents.
Learn from the incident to improve future response efforts.
5
Who shouldn't be involved in the incident process?
legal advisors
Those without experience
IT staff
incident managers
6
What is the objective of the Post-Incident Activity phase?
Limit the spread of the incident, eliminate threats, restore operations
Establish incident response capabilities before a cybersecurity event occur
Identify and evaluate potential security incidents.
Learn from the incident to improve future response efforts.
7
What are the phases of the NIST Incident Response Life Cycle?
erase, detect, erase, eradicate &recover, post-incident activity
Prep, detect/analyze, erase, eradi&recov, pre-incident activity
Prep, detect/analyze, erase, eradi&recover, post-incident activity
Prep, detect/analyze, contain, erad& recover, post-incident activity
8
What is the objective of the Detection and Analysis phase?
Establish incident response capabilities before a cybersecurity event occur
Learn from the incident to improve future response efforts.
Identify and evaluate potential security incidents.
Limit the spread of the incident, eliminate threats, restore operations

Bethania Yared: The NIST Incident Response Lifecycle Flashcards | StudBud