CSA CCSK Exam - Topic 9 Question 80 Discussion

Actual exam question for CSA's CCSK exam

Question #: 80
Topic #: 9

[All CCSK Questions]

The containment phase of the incident response lifecycle requires taking systems offline.

AFalse

BTrue

Show Suggested Answer

Suggested Answer: B

by Gabriele at Nov 15, 2024, 05:16 AM

Limited Time Offer

25%

Off

Get Premium CCSK Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Samuel

7 months ago

False, you can contain without shutting everything down.

upvoted 0 times

...

Gertude

8 months ago

Wait, really? I didn’t know that was part of the process!

upvoted 0 times

...

Diego

8 months ago

Totally agree, it’s a necessary step to prevent further damage.

upvoted 0 times

...

Annamae

8 months ago

I thought containment could happen without taking systems down?

upvoted 0 times

...

Derick

8 months ago

Yeah, taking systems offline is crucial during containment.

upvoted 0 times

...

Latanya

9 months ago

I’m leaning towards true as well, but I wonder if there are exceptions based on the type of incident.

upvoted 0 times

...

Susana

9 months ago

I feel like the answer is true, but I also recall some scenarios where containment could be done without taking everything offline.

upvoted 0 times

...

Amber

9 months ago

I remember a practice question that mentioned isolating affected systems, which might imply taking them offline.

upvoted 0 times

...

Jordan

9 months ago

I think the containment phase does involve taking systems offline, but I'm not entirely sure if it's always necessary.

upvoted 0 times

...

Horace

9 months ago

Okay, I think I've got this. The containment phase is focused on stopping the incident from getting worse, so B is the right answer.

upvoted 0 times

...

Camellia

9 months ago

I remember discussing this in class, but I'm drawing a blank right now. I'll have to review my notes before deciding.

upvoted 0 times

...

Alyssa

9 months ago

The containment phase is all about limiting the spread of an incident, so taking systems offline makes sense. I'll select B.

upvoted 0 times

...

Junita

9 months ago

Hmm, I'm not totally sure about this one. I'll have to think it through carefully before answering.

upvoted 0 times

...

Vincenza

9 months ago

I'm pretty sure the containment phase involves taking systems offline, so I'll go with B.

upvoted 0 times

...

Albina

2 years ago

Isn't the containment phase more about blocking access, implementing temporary fixes, and preventing further damage? Taking systems offline seems like overkill.

upvoted 0 times

Tom

2 years ago

True

upvoted 0 times

...

Dahlia

2 years ago

I agree, taking systems offline can be disruptive and may not always be necessary.

upvoted 0 times

...

Alpha

2 years ago

B) True

upvoted 0 times

...

Alecia

2 years ago

A) False

upvoted 0 times

...

Leslie

2 years ago

That makes sense. So the answer is B) True then.

upvoted 0 times

...

Beckie

2 years ago

I believe it's true because isolating affected systems can prevent further damage.

upvoted 0 times

...

Nana

2 years ago

Ha! Taking systems offline? What is this, the 90s? Clearly, it's all about network segmentation and virtual containment these days.

upvoted 0 times

Magdalene

2 years ago

True

upvoted 0 times

...

Regenia

2 years ago

B) True

upvoted 0 times

...

Felix

2 years ago

A) False

upvoted 0 times

...

Leslie

2 years ago

Do you think the containment phase requires taking systems offline?

upvoted 0 times

...

Mabelle

2 years ago

Hmm, I thought the containment phase was all about limiting the spread of the incident. Shutting down systems doesn't sound right to me.

upvoted 0 times

...

Casey

2 years ago

I'm pretty sure the containment phase involves isolating the affected systems, not necessarily taking them offline. But I'm not 100% sure.

upvoted 0 times

Edna

2 years ago

True

upvoted 0 times

...

Ma

2 years ago

I think you're right, the containment phase is about isolating the affected systems, not shutting them down completely.

upvoted 0 times

...

Leonor

2 years ago

B) True

upvoted 0 times

...

Dorothy

2 years ago

A) False

upvoted 0 times

...