CSA Exam CCSK Topic 9 Question 80 Discussion

Actual exam question for CSA's CCSK exam

Question #: 80
Topic #: 9

[All CCSK Questions]

The containment phase of the incident response lifecycle requires taking systems offline.

AFalse

BTrue

Show Suggested Answer

Suggested Answer: B

by Gabriele at Nov 15, 2024, 05:16 AM

Limited Time Offer

25%

Off

Get Premium CCSK Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Albina

11 days ago

Isn't the containment phase more about blocking access, implementing temporary fixes, and preventing further damage? Taking systems offline seems like overkill.

upvoted 0 times

Alecia

4 days ago

A) False

upvoted 0 times

...

Leslie

12 days ago

That makes sense. So the answer is B) True then.

upvoted 0 times

...

Beckie

16 days ago

I believe it's true because isolating affected systems can prevent further damage.

upvoted 0 times

...

Nana

19 days ago

Ha! Taking systems offline? What is this, the 90s? Clearly, it's all about network segmentation and virtual containment these days.

upvoted 0 times

...

Leslie

19 days ago

Do you think the containment phase requires taking systems offline?

upvoted 0 times

...

Mabelle

23 days ago

Hmm, I thought the containment phase was all about limiting the spread of the incident. Shutting down systems doesn't sound right to me.

upvoted 0 times

...

Casey

27 days ago

I'm pretty sure the containment phase involves isolating the affected systems, not necessarily taking them offline. But I'm not 100% sure.

upvoted 0 times

Dorothy

9 days ago

A) False

upvoted 0 times

...