Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Once the incident response team has been selected and trained, the first point of the incident response process to test would be which one of the following?
Team members' knowledge of what to do.
Team members' knowledge of who to call.
The qualifications of the team members.
The review of system logs.
A key and often overlooked step in incident response is knowing who to call. Thereafter the other activities would follow. Using the term "Users'" in the correct answer right along side the term "Team members'" in the incorrect answer is grossly mis-leading. Since the question is clearly about the "Incident Response Team", then the correct answer A would be arguably ruled-out because the question is about the IRT, not the general "User" community. In other words, the these two choice wants the tester to agree that the terms "User" and Team Member" mean the same thing...that is ridiculous and logic that brings no value to the CISM certification process.
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.