What is defined in the SOP of a computer security incident response capability (CSIRC)?
- the details on how an incident is handled
- the procedures that are followed during an incident response
- the metrics for measuring incident response capabilities
- the roadmap for increasing incident response capabilities
Explanation: A CSIRC will include standard operating procedures (SOPs) that are followed during an incident response. Procedures include following technical processes, filling out forms, and following checklists.
Related exam: Checkpoint Exam: Analyzing Security Data Group Exam
Related exam: CCNA Cyber Ops Chapter 13 Exam Answers
