|
|
เตรียมตัวสอบ CISA
| Area 02 : Question 12 ( C1 - 12 ) |
|
3
4
|
Question : Which of the following is LEAST likely to be associated with an incident response capability ?
| A) |
Developing a database repository of past incidents and actions to facilitate future corrective actions. |
| |
| B) |
Declaring the incident, which not only helps to carry out corrective measures, but also to improve the awareness level. |
| |
| C) |
Developing a detailed operations plan that outlines specific actions to be taken to recover from an incident. |
| |
| D) |
Establishing multi-disciplinary teams consisting of executive management, security staff, information systems staff, legal counsel, public relations, etc. to carry out the response |
| Question |
| |
( ) |
|
| |
| Choice : A |
| |
| Choice : B |
| |
| Choice : C |
| |
| Choice : D |
The Correct Answer is :
A. Developing a database repository of past incidents and actions to facilitate future corrective actions.
Explanation :
Developing a database repository of past incidents and actions to facilitate future corrective actions to take as a post - mortem process would be of least value in restoring service from an incident currently underway.
The creation of a detailed operations plan, a multi - disciplinary team and the declaration of incidents are all necessary parts of having an incident response capability which must be carried out immediately before, or during the incident in order to handle it properly.
|
