Study. uk . com
  1. Home
  2. All questions
  3. Question 790

CISM study material · question 790 of 1000

Which two kinds of sensitive material do incident response records commonly contain, according to NIST? Choose two.

  1. The organisation's own financial forecasts for each coming financial year
  2. Details of users who may have performed inappropriate actions
  3. The vendor's own proprietary source code for that one product line
  4. Data on exploited vulnerabilities and recent data breaches
Show the answer

Answer: D. Data on exploited vulnerabilities and recent data breaches
B. Details of users who may have performed inappropriate actions

SP 800-61r3 flags these records as sensitive: they hold detail on vulnerabilities that were exploited, on recent breaches, and on users who may have acted inappropriately, with the incident lead usually guarding them.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.AN-06.N2

Challenge yourself on this topic → Study as cards