300-215 Question 206
Select 3During a security incident in a corporate network, the incident response team uses Cisco SecureX to analyze the scope and impact of the breach. Which of the following actions align with the primary goals of incident response?
- A
Minimizing the impact of the incident on business operations
- B
Identifying and containing the threat to prevent further damage
- C
Prosecuting the attacker by collecting evidence for legal proceedings
- D
Restoring affected systems and services to normal operations
- E
Achieving 100% prevention of future incidents
Show answer and explanation
Correct answers: A, B, D
Explanation
The primary goals of incident response are to minimize the impact of the incident, identify and contain the threat, and restore normal operations as quickly as possible. While legal prosecution and future prevention are important considerations, they are not the main focus of incident response efforts during active incidents.
- A. Correct.
Minimizing the impact of the incident is a primary goal of incident response to ensure business continuity and reduce overall damage.
- B. Correct.
Identifying and containing the threat is essential in controlling the scope and limiting further harm, which aligns with incident response objectives.
- C. Incorrect.
While collecting evidence for legal purposes may be a secondary goal, it is not a primary objective of incident response.
- D. Correct.
Restoring affected systems and services is a critical step in the incident response process to resume normal operations.
- E. Incorrect.
Achieving 100% prevention of future incidents is unrealistic and not a goal of incident response; instead, the focus is on mitigation and recovery.