Loading demo links...
Showing 1–12 of 12 questions
A client executive demands immediate system shutdown during a volatile incident. What should the incident manager do first?
Select an option, then click Submit answer.
Why must scope and authorisation be confirmed in writing before response work begins?
Select an option, then click Submit answer.
During a long incident, which practice best controls analyst fatigue and errors?
Select an option, then click Submit answer.
Which two items belong in an incident engagement's proactive management? (Choose two.)
Select all that apply, then click Submit answer.
A stakeholder repeatedly requests updates outside agreed channels. The manager should do what?
Select an option, then click Submit answer.
CORRECT TEXT
The document defining what systems responders may access and actions they may take is the engagement ______.
Answer is in the explanation below.
Which factor most drives prioritisation when several workstreams compete for limited analysts?
Select an option, then click Submit answer.
DRAG DROP
Match each project management activity to its incident phase.
Items to match: Confirm scope and authorisation, Track costs and deliverables, Conduct post incident review, Escalate resource shortfalls.
Answer is in the explanation below.
A client's priorities conflict with preserving evidence. How should the manager resolve this?
Select an option, then click Submit answer.
Which two skills are essential when managing people in highly charged incident situations? (Choose two.)
Select all that apply, then click Submit answer.
Which two are medium-term containment measures? (Choose two.)
Select all that apply, then click Submit answer.
DRAG DROP
Match each containment action to its timeframe.
Items to match: Disable compromised user account, Rebuild domain trust relationships, Block malicious IP addresses, Architect segmented network redesign.
Answer is in the explanation below.
