Quiz – Incident First Response

Question 1 of 6

1. Question

What should you do first when you notice something unusual?

Stay calm and recognize an incident may have occurred

Correct Incorrect Correct answer

Panic and reboot every device at once

Correct Incorrect Correct answer

Announce it publicly on social media

Correct Incorrect Correct answer

Ignore it and continue working

Correct Incorrect Correct answer

Question 2 of 6

2. Question

Why should you isolate the affected system immediately?

To prevent the incident from spreading

Correct Incorrect Correct answer

To make the screen brighter

Correct Incorrect Correct answer

To speed up the internet

Correct Incorrect Correct answer

To free up storage space

Correct Incorrect Correct answer

Question 3 of 6

3. Question

How should you document the incident?

Systematically with timestamps and screenshots

Correct Incorrect Correct answer

From memory a week later

Correct Incorrect Correct answer

Only by talking about it verbally

Correct Incorrect Correct answer

Not at all to save time

Correct Incorrect Correct answer

Question 4 of 6

4. Question

Who should you escalate the incident to?

IT security authorities

Correct Incorrect Correct answer

Random coworkers in the hallway

Correct Incorrect Correct answer

Your social media followers

Correct Incorrect Correct answer

Nobody at all

Correct Incorrect Correct answer

Question 5 of 6

5. Question

Match each first-response step to its action.

Sort elements

Notice something unusual occurred
Disconnect the affected system
Record timestamps and screenshots
Report to IT security authorities

Recognize

Correct Incorrect Correct answer

Isolate

Correct Incorrect Correct answer

Document

Correct Incorrect Correct answer

Escalate

Correct Incorrect Correct answer

Question 6 of 6

6. Question

What should you preserve by not modifying files or attempting fixes? Answer in one word.

Correct Incorrect Correct answer