1|Page
INCIDENT RESPONSE PROCEDURES FOR DATA BREACHES
NEWEST 2026/2027 COMPLETE QUESTIONS AND CORRECT
ANSWERS (VERIFIED ANSWERS) |ALREADY GRADED A+||JUST
OUT!!!
What should be assessed to harden against DDoS attacks? -
ANSWER-Evaluate newer equipment/software, check for
viruses, assess training needs for network engineers, and
consider simulating attacks.
What is the first step when unencrypted account data is found
during support? - ANSWER-Determine the source of the
unencrypted data and log the issue as an 'Urgent' security issue
in the Project Tracking System.
What actions should be taken if unencrypted data is visible to
an end-user? - ANSWER-Follow breach instructions and
determine what information has been disclosed.
What should be done if unencrypted data is not visible to an
end-user? - ANSWER-Prepare a delete operation to remove the
data from the database.
,2|Page
What is a key component of the incident response for
unencrypted data? - ANSWER-Create an Incident Response
Report detailing the extent of data storage.
What should the development team be reminded of to prevent
unencrypted data issues? - ANSWER-The need to utilize
sensitive data flags.
What is the response to discovering an unauthorized wireless
access point? - ANSWER-Find and remove the unauthorized
device from the network and check access logs.
What should be verified if the unauthorized access point is on
the office network? - ANSWER-Verify that internal systems have
not been compromised.
What is the first step in responding to a vendor breach affecting
company data? - ANSWER-Determine which vendor was
breached.
What information should be gathered regarding the vendor
breach? - ANSWER-VRS risk ranking, breach location,
notification timing, and compromised data.
, 3|Page
What actions should be taken regarding the vendor after a
breach? - ANSWER-Assess containment, remediation, and
consider discontinuing data transfers to the vendor.
What should be communicated to company staff following a
vendor breach? - ANSWER-Awareness communications
regarding the breach and its implications.
What is a critical step in the hardening procedure after
discovering unauthorized access? - ANSWER-Inform employees
and start re-education on policies.
What should be done to ensure compliance with security
standards after a breach? - ANSWER-Re-run Credit Card
Number search tools to identify any unencrypted data.
What is a potential consequence of a vendor breach? -
ANSWER-Legal liabilities, penalties, and breach notification
requirements.
INCIDENT RESPONSE PROCEDURES FOR DATA BREACHES
NEWEST 2026/2027 COMPLETE QUESTIONS AND CORRECT
ANSWERS (VERIFIED ANSWERS) |ALREADY GRADED A+||JUST
OUT!!!
What should be assessed to harden against DDoS attacks? -
ANSWER-Evaluate newer equipment/software, check for
viruses, assess training needs for network engineers, and
consider simulating attacks.
What is the first step when unencrypted account data is found
during support? - ANSWER-Determine the source of the
unencrypted data and log the issue as an 'Urgent' security issue
in the Project Tracking System.
What actions should be taken if unencrypted data is visible to
an end-user? - ANSWER-Follow breach instructions and
determine what information has been disclosed.
What should be done if unencrypted data is not visible to an
end-user? - ANSWER-Prepare a delete operation to remove the
data from the database.
,2|Page
What is a key component of the incident response for
unencrypted data? - ANSWER-Create an Incident Response
Report detailing the extent of data storage.
What should the development team be reminded of to prevent
unencrypted data issues? - ANSWER-The need to utilize
sensitive data flags.
What is the response to discovering an unauthorized wireless
access point? - ANSWER-Find and remove the unauthorized
device from the network and check access logs.
What should be verified if the unauthorized access point is on
the office network? - ANSWER-Verify that internal systems have
not been compromised.
What is the first step in responding to a vendor breach affecting
company data? - ANSWER-Determine which vendor was
breached.
What information should be gathered regarding the vendor
breach? - ANSWER-VRS risk ranking, breach location,
notification timing, and compromised data.
, 3|Page
What actions should be taken regarding the vendor after a
breach? - ANSWER-Assess containment, remediation, and
consider discontinuing data transfers to the vendor.
What should be communicated to company staff following a
vendor breach? - ANSWER-Awareness communications
regarding the breach and its implications.
What is a critical step in the hardening procedure after
discovering unauthorized access? - ANSWER-Inform employees
and start re-education on policies.
What should be done to ensure compliance with security
standards after a breach? - ANSWER-Re-run Credit Card
Number search tools to identify any unencrypted data.
What is a potential consequence of a vendor breach? -
ANSWER-Legal liabilities, penalties, and breach notification
requirements.
