Quiz - Incident Response and Recovery -

What is the first step to take when a data breach occurs? *

Notify affected parties

Contain the breach

Assess the damage

Begin the investigation

In the context of incident response, what does "containment" refer to? *

Notifying all employees about the breach

Isolating affected systems to prevent further unauthorized access

Deleting all potentially compromised data

Hiring a public relations firm to manage the situation

What is the primary difference between Business Continuity and Disaster Recovery? *

Business Continuity is proactive, while Disaster Recovery is reactive

Business Continuity focuses on IT, while Disaster Recovery focuses on operations

Business Continuity is for small businesses, while Disaster Recovery is for large corporations

There is no difference; they are the same thing

What is a Business Impact Analysis (BIA) used for in BCDR planning? *

To calculate the financial cost of a disaster

To identify critical business functions and the potential impact of their disruption

To determine the likelihood of various disasters occurring

To assess the performance of the IT department

Which of the following is NOT typically a sign of a security incident? *

Unexpected system behavior

Anomalies in network traffic

Regular software updates

Unauthorized account activity

Which of the following are key components of an effective incident response plan? (Select all that apply) *

Policy creation

Team formation

Incident classification

Response procedures

Annual company picnic planning

What are some important steps to take when a data breach occurs? (Select all that apply) *

Containment

Assessment

Notification

Investigation

Ignoring the problem and hoping it goes away

Which of the following are common signs of a security incident? (Select all that apply) *

Unexpected system behavior

Unauthorized access or account activity

Presence of unexpected software or files

Normal network traffic patterns

Altered or deleted files

An incident response plan should be created once and never changed. *

True

False

Regular testing and training are essential components of an effective Business Continuity and Disaster Recovery strategy. *

True

False

Cybersecurity Essentials for Small and Medium Businesses

Quiz – Incident Response and Recovery