Which NIST incident response life cycle phase includes continuous monitoring by the CSIRT to quickly identify and validate an incident?

IT Exam Items Repository › Category: CCNA CyberOps › Which NIST incident response life cycle phase includes continuous monitoring by the CSIRT to quickly identify and validate an incident?

Which NIST incident response life cycle phase includes continuous monitoring by the CSIRT to quickly identify and validate an incident?

Detection and analysis
Preparation
Containment, eradication, and recovery
Post-incident activities

Explanation: It is in the detection and analysis phase of the NIST incident response life cycle that the CSIRT identifies and validates incidents through continuous monitoring. The NIST defines four stages of the incident response life cycle.

Which NIST incident response life cycle phase includes continuous monitoring by the CSIRT to quickly identify and validate an incident?

About The Author

ITExamAnswers Editorial Team