Study. uk . com
  1. Home
  2. All questions
  3. Question 715

CISM study material · question 715 of 1000

Which two reasons does NIST give for including physical security in incident response? Choose two.

  1. Responders may need access to facilities, such as a compromised workstation in a locked office
  2. Some incidents occur through physical breaches or combine physical and logical attack
  3. Physical security holds the authority to declare an incident once a breach of the premises has been confirmed
  4. Physical security staff are all trained in digital forensics and in evidence handling as well
Show the answer

Answer: B. Some incidents occur through physical breaches or combine physical and logical attack
A. Responders may need access to facilities, such as a compromised workstation in a locked office

SP 800-61r3 gives two reasons: an incident may begin with a physical breach or pair physical with logical attack, and responders may need to get into facilities while handling it.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 2.2 Roles and Responsibilities — Physical security

Challenge yourself on this topic → Study as cards