Question 1Which of the following statements accurately describe playbooks? Select three answers.1 pointA playbook improves efficiency when identifying and mitigating an incident.A playbook is used to develop compliance regulations.A playbook can be used to respond to an incidentA playbook is an essential tool used in cybersecurity.

Which statements are true about playbooks? Select three answers.Playbooks categorize and analyze large amounts of data to help security teams identify risk.Playbooks ensure that people follow a consistent list of actions in a prescribed way.Playbooks clarify what tools should be used to respond to security incidents.Playbooks are manuals that provide details about any operational action.SkipSubmit

Question 3Fill in the blank: Incident response playbooks are  _____ used to help mitigate and manage security incidents from beginning to end.1 pointexaminationsguidesexercisesinquiries4.Question 4

Which statement best describes the functionality of automated playbooks?1 分They require the use of human intervention to execute tasks.They use automation to execute tasks and response actions.They require the combination of human intervention and automation to execute tasks.They use a combination of flowcharts and manual input to execute tasks and response actions.

Question 2What does a security team do when updating and improving a playbook? Select all that apply.1 pointConsider learnings from past security incidentsDiscuss ways to improve security postureImprove antivirus software performanceRefine response strategies for future incidents

Question 1Playbooks are permanent, best-practice documents, so a security team should not make changes to them.1 pointTrueFalse2.Question 2A business recently experienced a security breach. Security professionals are currently restoring the affected data using a clean backup that was created before the incident. What playbook phase does this scenario describe?1 pointContainmentPost-incident activityDetection and analysisEradication and recovery3.Question 3Fill in the blank: Once a security incident is resolved, security analysts perform various post-incident activities and _____ efforts with the security team. 1 pointeradicationcoordinationpreparationdetection4.Question 4Which action can a security analyst take when they are assessing a SIEM alert?1 pointAnalyze log data and related metricsIsolate an infected network systemRestore the affected data with a clean backupCreate a final report