Study. uk . com
  1. Home
  2. All questions
  3. Question 813

CISM study material · question 813 of 1000

Which two purposes does containment serve, according to NIST? Choose two.

  1. Establishing the incident's own root cause before any further action is taken
  2. Preventing additional damage
  3. Preserving the chain of custody for it
  4. Avoiding the exhaustion of the organisation's response resources
Show the answer

Answer: B. Preventing additional damage
D. Avoiding the exhaustion of the organisation's response resources

SP 800-61r3 states containment refers to preventing the expansion of an incident, and that containment can prevent additional damage and avoid overwhelming the organisation's resources.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.MI-01.N1

Challenge yourself on this topic → Study as cards