MENU
The containment phase of the incident response lifecycle requires taking systems offline.
Suggested Answer: B
Get Premium CCSK Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
32 comments · newest first
SA
Samuel
10 months ago
False, you can contain without shutting everything down.
GE
Gertude
11 months ago
Wait, really? I didn’t know that was part of the process!
DI
Diego
11 months ago
Totally agree, it’s a necessary step to prevent further damage.
AN
Annamae
11 months ago
I thought containment could happen without taking systems down?
DE
Derick
11 months ago
Yeah, taking systems offline is crucial during containment.
LA
Latanya
12 months ago
I’m leaning towards true as well, but I wonder if there are exceptions based on the type of incident.
SU
Susana
12 months ago
I feel like the answer is true, but I also recall some scenarios where containment could be done without taking everything offline.
AM
Amber
12 months ago
I remember a practice question that mentioned isolating affected systems, which might imply taking them offline.
JO
Jordan
1 year ago
I think the containment phase does involve taking systems offline, but I'm not entirely sure if it's always necessary.
HO
Horace
1 year ago
Okay, I think I've got this. The containment phase is focused on stopping the incident from getting worse, so B is the right answer.
CA
Camellia
1 year ago
I remember discussing this in class, but I'm drawing a blank right now. I'll have to review my notes before deciding.
AL
Alyssa
1 year ago
The containment phase is all about limiting the spread of an incident, so taking systems offline makes sense. I'll select B.
JU
Junita
1 year ago
Hmm, I'm not totally sure about this one. I'll have to think it through carefully before answering.
VI
Vincenza
1 year ago
I'm pretty sure the containment phase involves taking systems offline, so I'll go with B.
AL
Albina
2 years ago
Isn't the containment phase more about blocking access, implementing temporary fixes, and preventing further damage? Taking systems offline seems like overkill.
TO
Tom
2 years ago
True
DA
Dahlia
2 years ago
I agree, taking systems offline can be disruptive and may not always be necessary.
AL
Alpha
2 years ago
B) True
AL
Alecia
2 years ago
A) False
LE
Leslie
2 years ago
That makes sense. So the answer is B) True then.
BE
Beckie
2 years ago
I believe it's true because isolating affected systems can prevent further damage.
NA
Nana
2 years ago
Ha! Taking systems offline? What is this, the 90s? Clearly, it's all about network segmentation and virtual containment these days.
MA
Magdalene
2 years ago
True
RE
Regenia
2 years ago
B) True
FE
Felix
2 years ago
A) False
LE
Leslie
2 years ago
Do you think the containment phase requires taking systems offline?
MA
Mabelle
2 years ago
Hmm, I thought the containment phase was all about limiting the spread of the incident. Shutting down systems doesn't sound right to me.
CA
Casey
2 years ago
I'm pretty sure the containment phase involves isolating the affected systems, not necessarily taking them offline. But I'm not 100% sure.
ED
Edna
2 years ago
True
MA
Ma
2 years ago
I think you're right, the containment phase is about isolating the affected systems, not shutting them down completely.
LE
Leonor
2 years ago
B) True
DO
Dorothy
2 years ago
A) False