MENU
You work as a Senior Marketing Manger for Umbrella Inc. You find out that some of the software applications on the systems were malfunctioning and also you were not able to access your remote desktop session. You suspected that some malicious attack was performed on the network of the company. You immediately called the incident response team to handle the situation who enquired the Network Administrator to acquire all relevant information regarding the malfunctioning. The Network Administrator informed the incident response team that he was reviewing the security of the network which caused all these problems. Incident response team announced that this was a controlled event not an incident. Which of the following steps of an incident handling process was performed by the incident response team?
Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Free Preparation Discussions
ISC2 ISSMP Exam - Topic 1 Question 118 Discussion
Posted by Lizette on Jul 18, 2026 at 05:37 AM
Suggested Answer: D
Get Premium ISSMP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
LO
Lonny
1 month ago
Definitely A) Containment. They managed the issue before it escalated.
ST
Staci
1 month ago
I agree, but it feels like A) Containment too. They contained the situation, right?
MY
My
1 month ago
I think it's D) Identification. They figured out it was a controlled event.
FR
France
2 months ago
Definitely not Preparation, that’s for sure!
ST
Stacey
2 months ago
I thought it was more about Containment since they called the team.
EL
Ellsworth
2 months ago
Wait, how can it be a controlled event? That seems sketchy.
DA
Daren
2 months ago
Totally agree, they were figuring out what was going on.
AL
Alpha
2 months ago
Sounds like they were in the Identification phase.
JE
Jesus
2 months ago
I’m not entirely confident, but I feel like they were in the containment phase since they were trying to manage the situation after the discovery of the malfunctioning software.
SU
Sue
3 months ago
This reminds me of a practice question where we discussed controlled events. I think they were confirming that it wasn't a full-blown incident, which could relate to preparation.
CH
Chantay
3 months ago
I’m a bit unsure, but I think this might relate to the identification phase since they were trying to determine what was happening with the network.
DE
Devora
3 months ago
I remember studying the incident handling process, and I think the step they took was more about assessing the situation rather than containment or eradication.