An information security manager believes that a network file server was compromised by a hacker. Which of
the following should be the FIRST action taken?

What task should be performed once a security incident has been verified?

The PRIMARY consideration when defining recovery time objectives (RTOs) for information assets is:

A possible breach of an organization’s IT system is reported by the project manager. What is the FIRST thing
the incident response manager should do?

An organization has verified that its customer information was recently exposed. Which of the following is the
FIRST step a security manager should take in this situation?

The FIRST step in an incident response plan is to:

The MOST important objective of a post incident review is to:

The PRIMARY purpose of involving third-party teams for carrying out post event reviews of information security
incidents is to:

Which of the following has the highest priority when defining an emergency response plan?

If an organization considers taking legal action on a security incident, the information security manager should
focus PRIMARILY on: