#1
Which role is responsible for coordinating resources and managing incidents?
Incident Responder
Incident Commander
Security Analyst
System Administrator
#2
What is the primary goal of incident management?
To prevent all incidents from occurring
To respond to and recover from incidents effectively
To allocate blame for incidents
To ignore incidents until they resolve themselves
#3
Which document outlines the roles, responsibilities, and protocols for responding to incidents within an organization?
Incident Response Plan
Employee Handbook
Marketing Strategy
Cookbook
#4
In an incident management context, what does SLA stand for?
Service Level Agreement
Security Liaison Authority
System Log Analysis
Serious Legal Action
#5
Which phase of the incident management process involves restoring normal operations?
Preparation
Response
Recovery
Detection
#6
What is the purpose of a 'tabletop exercise' in incident management?
To provide a place to eat during an incident
To simulate an incident in a discussion-based environment
To play board games
To avoid preparing for incidents
#7
In an incident command structure, who is responsible for communicating with the media and other organizations?
Incident Commander
Public Information Officer
Operations Section Chief
Safety Officer
#8
What is the purpose of a tabletop exercise in incident management?
To test technical skills of responders
To simulate an incident in a controlled environment
To perform physical exercises during incidents
To create chaos within the organization
#9
During an incident, what is the purpose of establishing a chain of command?
To ensure everyone has a title
To delegate authority and responsibilities
To create confusion
To maintain secrecy
#10
Who is responsible for ensuring the safety of responders and victims during an incident?
Safety Officer
Public Information Officer
Incident Commander
Operations Section Chief
#11
In the incident command structure, which role is responsible for managing financial aspects related to the incident?
Incident Commander
Finance/Administration Section Chief
Operations Section Chief
Public Information Officer
#12
What is the purpose of a 'hot wash' session after an incident?
To heat up the room
To wash away evidence
To review the incident response while details are fresh in mind
To avoid discussing the incident
#13
Which of the following is NOT a phase of the incident management lifecycle?
Preparation
Detection and Analysis
Recovery
Punishment
#14
What is the primary purpose of the 'lessons learned' phase in incident management?
To assign blame
To analyze the incident and identify areas for improvement
To ignore mistakes
To repeat the same mistakes
#15
What is the primary objective of establishing an incident management team?
To ensure everyone is busy during an incident
To centralize decision-making and coordination during incidents
To exclude certain team members
To make the incident worse
#16
What is the purpose of conducting a post-mortem analysis after an incident?
To assign blame
To review the incident response and identify areas for improvement
To ignore mistakes
To repeat the same mistakes