Study. uk . com
  1. Home
  2. All questions
  3. Question 815

CISM study material · question 815 of 1000

Which example does NIST give of an incident type a third party might be authorised to contain automatically on the organisation's behalf?

  1. A compromised administrator credential somewhere on the estate
  2. A ransomware infection on a single managed user endpoint device
  3. An insider exfiltrating data from the corporate network
  4. A large-scale distributed denial-of-service attack
Show the answer

Answer: D. A large-scale distributed denial-of-service attack

SP 800-61r3 raises the possibility of letting providers — internet or cloud — contain certain incidents for the organisation, and names large-scale distributed denial of service as the case.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.MI-01.C2

Challenge yourself on this topic → Study as cards