Study. uk . com
  1. Home
  2. All questions
  3. Question 412

CISSP study material · question 412 of 500

In the SP 800-61 Rev. 3 life cycle, which Functions are preparation that supports response without being part of it, and which are the response itself?

  1. All six Functions are part of the response, performed in sequence.
  2. Identify and Protect are preparation; Govern, Detect, Respond and Recover are the response.
  3. Govern and Identify are preparation; Protect, Detect, Respond and Recover are the response.
  4. Govern, Identify and Protect are preparation; Detect, Respond and Recover are the response.
Show the answer

Answer: D. Govern, Identify and Protect are preparation; Detect, Respond and Recover are the response.

SP 800-61r3 shows Govern, Identify and Protect as broader risk management activities that support response, with Detect, Respond and Recover forming incident response itself.

Source: NIST SP 800-61 Rev. 3 (NIST) — SP 800-61r3 > 2.1 Incident Response Life Cycle Model

Challenge yourself on this topic → Study as cards