CISM Question 107

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  I would actually go with B here - Develop an incident response plan. Digital forensics is/can be a part of incident response plan (it can be integrated into IRP for a specific asset).

• 1

  D. Enabling activity logging, on the other hand, is a proactive step to capture relevant information that can be invaluable when investigating security incidents or breaches within the business-critical application.

• 2

  D. Enable activity logging.