CSA CCSK Exam - Topic 9 Question 80 Discussion

Actual exam question for CSA's CCSK exam

Question #: 80
Topic #: 9

[All CCSK Questions]

The containment phase of the incident response lifecycle requires taking systems offline.

AFalse

BTrue

Show Suggested Answer

Suggested Answer: B

by Gabriele at Nov 15, 2024, 05:16 AM

Limited Time Offer

25%

Off

Get Premium CCSK Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Samuel

4 months ago

False, you can contain without shutting everything down.

upvoted 0 times

...

Gertude

5 months ago

Wait, really? I didn’t know that was part of the process!

upvoted 0 times

...

Diego

5 months ago

Totally agree, it’s a necessary step to prevent further damage.

upvoted 0 times

...

Annamae

5 months ago

I thought containment could happen without taking systems down?

upvoted 0 times

...

Derick

5 months ago

Yeah, taking systems offline is crucial during containment.

upvoted 0 times

...

Latanya

5 months ago

I’m leaning towards true as well, but I wonder if there are exceptions based on the type of incident.

upvoted 0 times

...

Susana

6 months ago

I feel like the answer is true, but I also recall some scenarios where containment could be done without taking everything offline.

upvoted 0 times

...

Amber

6 months ago

I remember a practice question that mentioned isolating affected systems, which might imply taking them offline.

upvoted 0 times

...

Jordan

6 months ago

I think the containment phase does involve taking systems offline, but I'm not entirely sure if it's always necessary.

upvoted 0 times

...

Horace

6 months ago

Okay, I think I've got this. The containment phase is focused on stopping the incident from getting worse, so B is the right answer.

upvoted 0 times

...

Camellia

6 months ago

I remember discussing this in class, but I'm drawing a blank right now. I'll have to review my notes before deciding.

upvoted 0 times

...

Alyssa

6 months ago

The containment phase is all about limiting the spread of an incident, so taking systems offline makes sense. I'll select B.

upvoted 0 times

...

Junita

6 months ago

Hmm, I'm not totally sure about this one. I'll have to think it through carefully before answering.

upvoted 0 times

...

Vincenza

6 months ago

I'm pretty sure the containment phase involves taking systems offline, so I'll go with B.

upvoted 0 times

...

Albina

1 year ago

Isn't the containment phase more about blocking access, implementing temporary fixes, and preventing further damage? Taking systems offline seems like overkill.

upvoted 0 times

Tom

1 year ago

True

upvoted 0 times

...

Dahlia

1 year ago

I agree, taking systems offline can be disruptive and may not always be necessary.

upvoted 0 times

...

Alpha

1 year ago

B) True

upvoted 0 times

...

Alecia

1 year ago

A) False

upvoted 0 times

...

Leslie

1 year ago

That makes sense. So the answer is B) True then.

upvoted 0 times

...

Beckie

1 year ago

I believe it's true because isolating affected systems can prevent further damage.

upvoted 0 times

...

Nana

1 year ago

Ha! Taking systems offline? What is this, the 90s? Clearly, it's all about network segmentation and virtual containment these days.

upvoted 0 times

Magdalene

1 year ago

True

upvoted 0 times

...

Regenia

1 year ago

B) True

upvoted 0 times

...

Felix

1 year ago

A) False

upvoted 0 times

...

Leslie

1 year ago

Do you think the containment phase requires taking systems offline?

upvoted 0 times

...

Mabelle

1 year ago

Hmm, I thought the containment phase was all about limiting the spread of the incident. Shutting down systems doesn't sound right to me.

upvoted 0 times

...

Casey

1 year ago

I'm pretty sure the containment phase involves isolating the affected systems, not necessarily taking them offline. But I'm not 100% sure.

upvoted 0 times

Edna

1 year ago

True

upvoted 0 times

...

Ma

1 year ago

I think you're right, the containment phase is about isolating the affected systems, not shutting them down completely.

upvoted 0 times

...

Leonor

1 year ago

B) True

upvoted 0 times

...

Dorothy

1 year ago

A) False

upvoted 0 times

...