Cybersecurity and Response Planningintermediate
Distinguish an event, an adverse event, and an incident, and give one example of how an alert may be assessed.
Answer
An event is an observable occurrence. An adverse event is a harmful or potentially harmful occurrence, such as an outage. An incident is an adverse event or threatened adverse event affecting an information system or network. An alert should be investigated to determine whether it reflects ordinary activity, an adverse event, or an incident.
Explanation
### What a good answer covers
- An event is an observable system or network occurrence and may be normal.
- An adverse event has a harmful or potentially harmful character.
- An incident is an adverse event or threat of one affecting an information system or network.
- Analysts assess alerts rather than treating every alert as a confirmed incident.
### Remember
An alert is a signal to assess, not proof by itself.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free