NIST – EP.8 – Quiz

In the case of a compromised account, it may be necessary to ______ with clients regarding how the account should be handled.

An organization that tests its incident response plan should be able to respond _______ effectively than one that doesn’t.

Key responders to an incident need to know their ________ .

There may be legal and regulatory requirements for how to respond to and notify ______ in the case of the authentication failure.

Incidents should be carefully ______ , assessed, and analyzed in preparation for future responses.

Planning and testing are necessary to ensure that ______ is effective and properly executed in the case of an incident.

When an incident has occurred and a report has been written up, there should be a ______ to review the incident and its causes.

It is important that the details of all users, systems, and organizations involved with an incident are stored and reported on, sometimes including _______ .

An organization’s incident response provides the ______ for dealing with unexpected deviations from ______ or acceptable operations.