#1
Which role is responsible for coordinating resources and managing incidents?
Incident Responder
Incident Commander
Security Analyst
System Administrator
#2
What is the primary goal of incident management?
To prevent all incidents from occurring
To respond to and recover from incidents effectively
To allocate blame for incidents
To ignore incidents until they resolve themselves
#3
Which document outlines the roles, responsibilities, and protocols for responding to incidents within an organization?
Incident Response Plan
Employee Handbook
Marketing Strategy
Cookbook
#4
In an incident management context, what does SLA stand for?
Service Level Agreement
Security Liaison Authority
System Log Analysis
Serious Legal Action
#5
Which phase of the incident management process involves restoring normal operations?
Preparation
Response
Recovery
Detection
#6
What is the purpose of a 'tabletop exercise' in incident management?
To provide a place to eat during an incident
To simulate an incident in a discussion-based environment
To play board games
To avoid preparing for incidents
#7
What does the acronym RTO stand for in the context of incident management?
Recovery Time Objective
Real-Time Operations
Return to Office
Regulatory Technology Oversight
#8
What is the primary purpose of an Incident Response Plan (IRP)?
To cause panic among employees
To provide guidelines and procedures for responding to incidents
To assign blame after an incident occurs
To ignore incidents until they resolve themselves
#9
During an incident, who is responsible for activating the Incident Command System (ICS)?
System Administrator
Public Information Officer
Incident Commander
Security Analyst
#10
In an incident command structure, who is responsible for communicating with the media and other organizations?
Incident Commander
Public Information Officer
Operations Section Chief
Safety Officer
#11
What is the purpose of a tabletop exercise in incident management?
To test technical skills of responders
To simulate an incident in a controlled environment
To perform physical exercises during incidents
To create chaos within the organization
#12
During an incident, what is the purpose of establishing a chain of command?
To ensure everyone has a title
To delegate authority and responsibilities
To create confusion
To maintain secrecy
#13
Who is responsible for ensuring the safety of responders and victims during an incident?
Safety Officer
Public Information Officer
Incident Commander
Operations Section Chief
#14
In the incident command structure, which role is responsible for managing financial aspects related to the incident?
Incident Commander
Finance/Administration Section Chief
Operations Section Chief
Public Information Officer
#15
What is the purpose of a 'hot wash' session after an incident?
To heat up the room
To wash away evidence
To review the incident response while details are fresh in mind
To avoid discussing the incident
#16
What is the role of the Liaison Officer in an incident management structure?
To handle public relations
To establish communication with external agencies
To manage financial aspects
To coordinate resources
#17
Which phase of incident management involves identifying and analyzing the root causes of an incident?
Prevention
Detection
Analysis
Response
#18
Who is responsible for documenting incident details, actions taken, and outcomes?
Public Information Officer
Operations Section Chief
Incident Commander
Documentation Officer
#19
In the incident command structure, who is responsible for directing tactical operations?
Safety Officer
Incident Commander
Operations Section Chief
Public Information Officer
#20
What is the purpose of establishing a Unified Command during multi-agency incidents?
To create confusion
To consolidate decision-making and coordination among agencies
To assign blame
To compete for resources
#21
What is the purpose of conducting a tabletop exercise in incident management?
To simulate an incident in a controlled environment
To play board games
To conduct physical exercises
To cause chaos within the organization
#22
Which of the following is NOT a phase of the incident management lifecycle?
Preparation
Detection and Analysis
Recovery
Punishment
#23
What is the primary purpose of the 'lessons learned' phase in incident management?
To assign blame
To analyze the incident and identify areas for improvement
To ignore mistakes
To repeat the same mistakes
#24
What is the primary objective of establishing an incident management team?
To ensure everyone is busy during an incident
To centralize decision-making and coordination during incidents
To exclude certain team members
To make the incident worse
#25
What is the purpose of conducting a post-mortem analysis after an incident?
To assign blame
To review the incident response and identify areas for improvement
To ignore mistakes
To repeat the same mistakes