MENU
What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security incident?
Suggested Answer: D
Get Premium CIS-SIR Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
MA
Marva
12 months ago
I’m surprised people overlook A, it’s all about learning from mistakes!
PA
Patti
12 months ago
C is crucial, but D really seals the deal.
LA
Latricia
1 year ago
Wait, are we really saying preparation isn’t key?
TE
Terina
1 year ago
I think B is super important too, can't fix what you don't see!
WH
Whitney
1 year ago
Definitely D, that's where you limit the damage.
BI
Billi
1 year ago
I keep going back and forth, but I think Post Incident Activity is more about learning from the incident rather than limiting its impact.
AR
Arlyne
1 year ago
I practiced a question like this, and I feel like Preparation and Identification plays a role, but it might be more about preventing incidents rather than limiting impact.
JO
Johnna
1 year ago
I'm not entirely sure, but I remember something about Detection & Analysis being crucial too. If you can't detect it, how can you contain it?
YA
Yasuko
1 year ago
I think the part that limits the impact is definitely Containment, Eradication, and Recovery. It makes sense to stop the incident from spreading.
ED
Edmond
1 year ago
Hmm, I'm not too confident on this one. I'm kind of torn between the Debug Logs and the Record Jobs. I think I'd start with the Debug Logs, but I'd also want to double-check the Record Jobs just to be thorough.
SK
Skye
1 year ago
I'm a bit confused on this one. I'm not sure which characteristics are most important to focus on. Guess I'll need to re-read the question carefully.