CISSP-ISSAP: Information Systems Security Architecture Professional

Question

You serve as an incident-handling manager for a company. The company’s public-relations process includes an event that responds to email queries.

However, in the past few days, this process has been found to give spammers a way to carry out different types of email attacks. Which phases of the incident-handling process will now be involved in resolving this process and finding a solution? Each correct answer represents part of the solution. Choose all that apply.

Choose two

Explanation

Eradication removes the weakness or mechanism that enables the email attacks, while recovery returns the affected email-query process to secure normal operation after remediation. Incident-handling capabilities include preparation, detection and analysis, containment, eradication, and recovery.

Learn more

NIST SP 800-171 Rev. 3 — Incident Handling

CISSP-ISSAP: Information Systems Security Architecture Professional

AstroTutor

Notes

Readiness

QuestionQ197

Community Discussion