CIS-SIR
Security Incident Response Management
easy
Question 6 of 30

What does the Review state mean in the default NIST Stateful process definition?

AThe incident is complete and systems are back to normal, but a post incident review is still needed
BThe incident is waiting for initial triage and data collection
CContainment has started but eradication is blocked
DThe closure information tab has been bypassed

More Security Incident Response Management Questions

30 questions

Full Certified Implementation Specialist - Security Incident Response Practice Test

All topics covered

All Certified Implementation Specialist - Security Incident Response Questions

Browse by topic

Related Questions

Which value is a valid security incident task state?...

easy

An analyst is ready to close a security incident in the NIST Stateful process. What must be complete...

medium

How does the NIST Open process definition differ from NIST Stateful?...

medium

An admin reviews Process Selection and sees invalid states after changing definitions. What does Pro...

medium

A responder wants to flag an incident as a possible major security incident without promoting it yet...

medium
View all Security Incident Response Management questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion

Sign InCreate free account