Domain 7: Security Operations

Practice questions covering incident response, disaster recovery, business continuity, and security operations.

Question 1 of 10

Medium

Progress: 0%

What is the primary purpose of a Business Impact Analysis (BIA)?

To identify potential threats to an organization

To determine the impact of disruptions to business functions

To analyze the cost of security controls

To evaluate employee performance during security incidents

Quick Tips: Security Operations

Incident Response: Know the six phases: Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned.

Business Continuity vs. Disaster Recovery: BCP focuses on continuing business operations during disruptions, while DR focuses on restoring IT systems and data after an incident.

Recovery Sites: Understand the differences between hot sites (immediate availability), warm sites (partial availability), and cold sites (minimal infrastructure).

Digital Forensics: Remember the core principles: proper evidence handling, chain of custody documentation, and using forensically sound techniques.