The NIST Incident Response Lifecycle
questions and correct answers rated
A+
What is incident response? - correct answer ✔✔ Incident response refers to an organization's
response toward threats such as cyber attack and data breach. It involves developing a backup
and recovery plan
What are the components of the NIST lifecycle? (Four components) - correct answer ✔✔ The
four components of the NIST incident response cycle are:
1) Preparation
2) Detection and Analysis
3) Containment, Eradication, and Recovery
4) Post-Incident Activity
Preparation - correct answer ✔✔ Focuses on developing policies, plans, and procedures
necessary for incident response
Detection and Analysis - correct answer ✔✔ Involves identifying and analyzing suspicious
activities. Includes monitoring security logs and forensic analysis
Containment, Eradication, and Recovery - correct answer ✔✔ Focuses on containing the impact
of the incident, eradicating the cause, and restoring systems and data. Involves patching
vulnerabilities
Post-Incident Activity - correct answer ✔✔ Involves documenting the incident, analyzing the
lessons learned, and improving the incident response plan and procedures
questions and correct answers rated
A+
What is incident response? - correct answer ✔✔ Incident response refers to an organization's
response toward threats such as cyber attack and data breach. It involves developing a backup
and recovery plan
What are the components of the NIST lifecycle? (Four components) - correct answer ✔✔ The
four components of the NIST incident response cycle are:
1) Preparation
2) Detection and Analysis
3) Containment, Eradication, and Recovery
4) Post-Incident Activity
Preparation - correct answer ✔✔ Focuses on developing policies, plans, and procedures
necessary for incident response
Detection and Analysis - correct answer ✔✔ Involves identifying and analyzing suspicious
activities. Includes monitoring security logs and forensic analysis
Containment, Eradication, and Recovery - correct answer ✔✔ Focuses on containing the impact
of the incident, eradicating the cause, and restoring systems and data. Involves patching
vulnerabilities
Post-Incident Activity - correct answer ✔✔ Involves documenting the incident, analyzing the
lessons learned, and improving the incident response plan and procedures
