When using tcpreplay, the timestamp for the packet will be the original timestamp from the pcap file.

Question $8$ options:

True

False

Question $9(3$ points$)$

A playbook and checklist are the same thing.

Question $9$ options:

True

False

Question $10(3$ points$)$

In which phase of incident response does an organization create and incorporate lessons learned from the incident?

Question $10$ options:

Preparation

Detection

Containment

Post$-$incident activity

Question $11(3$ points$)$

A $\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_$is an incident that is expected to cause significant damage, corruption, or loss of critical and$/$or strategic company or customer information. A high$-$level incident may involve widespread or extended loss of system or network resources.