Study. uk . com
  1. Home
  2. All questions
  3. Question 783

CISM study material · question 783 of 1000

Which trade-off does NIST identify in selecting a response strategy for an active incident?

  1. Cost of response against cost of the incident
  2. Internal handling against external assistance
  3. Quick recovery against the value of observing the attacker or conducting a more thorough investigation
  4. Technical containment against legal notification
Show the answer

Answer: C. Quick recovery against the value of observing the attacker or conducting a more thorough investigation

SP 800-61r3 weighs getting back to normal fast against watching the attacker or investigating more thoroughly, and notes every strategy choice costs something.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.MA-03.R3

Challenge yourself on this topic → Study as cards