Question 7

In general, the entire computer security incident response team (CSIRT) or an appointed group of team members should review any changes to an incident response plan.

Group of answer choices

True

False

Question 8

Because a comprehensive incident response plan may contain proprietary information, it should be available only to authorized users.

Group of answer choices

True

False

Question 9

Which of the following is a set of software tools that attempts to automate some tasks required in order to respond to incidents?

Group of answer choices

CSIRT

SOAR

ENISA

The Sleuth Kit

Question 10

On a suspected incident report, which severity level describes a compromise of one or more noncritical systems?

Group of answer choices

Severe

Moderate

Low

High