SSCP Cert Prep: 4 Incident Response & Recovery with all Correct & 100% Verified Answers |Guaranteed to Pass

SSCP Cert Prep: 4 Incident Response & Recovery with all
Correct & 100% Verified Answers |Guaranteed to Pass

During an incident response, what is the highest priority of first responders?

identifying the root cause
restoring operations
collecting evidence
containing the damage ✔Correct Answer-containing the damage

Federal law requires U.S. businesses to report verified security incidents to US-CERT.

TRUE
FALSE ✔Correct Answer-False

The chain of custody must be updated EVERY time someone handles a piece of evidence.
TRUE
FALSE ✔Correct Answer-True

Software forensics may be used to identify the origin of malware.
TRUE
FALSE ✔Correct Answer-True

What type of investigation would typically be launched in response to a report of high network
latency?

operational
civil
criminal
regulatory ✔Correct Answer-Operational

Server logs are an example of _____ evidence.

documentary
testimonial
expert opinion
real ✔Correct Answer-documentary

Which evidence source should be collected first when considering the order of volatility?

temporary files
memory contents