Tag: Question 0570

Systems Security Certified Practitioner – SSCP – Question0570

Notifying the appropriate parties to take action in order to determine the extent of the severity of an incident and to remediate the incident's effects is part of:

A. Incident Evaluation
B. Incident Recognition
C. Incident Protection
D. Incident Response

Correct Answer: D

Explanation:

These are core functions of the incident response process.
“Incident Evaluation” is incorrect. Evaluation of the extent and cause of the incident is a component of the incident response process.
“Incident Recognition” is incorrect. Recognition that an incident has occurred is the precursor to the initiation of the incident response process.
“Incident Protection” is incorrect. This is an almost-right-sounding nonsense answer to distract the unwary.
References CBK, pp. 698 -703