A responder wants to flag an incident as a possible major security incident without promoting it yet. Which combination is required?

ADetection date, Justification, and Potential impact, and the Major Security Incident Candidate tag is applied

BDetection date and Estimated resolution date, and the Major Security Incident tag is applied

COnly Justification is required, and the incident is immediately linked as a child incident

DNo fields are required, but a Teams channel is created automatically

More Security Incident Response Management Questions

30 questions

Full Certified Implementation Specialist - Security Incident Response Practice Test

All topics covered

All Certified Implementation Specialist - Security Incident Response Questions

Browse by topic

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.