Unit 4 assessment — Working a breach safely
Six questions on the safe response, the queue and the closed case.
6 questions drawn from a bank of 11, in their own order with the options moved. Take it again and you sit a different paper.
0 of 6 answered
1. Who owns the decision to stop a process?
Tests: Ownership of the stop decision
2. A response would satisfy the security requirement and stop production. Who decides?
Tests: Who owns a production-affecting call
3. What must the closed case hold for an assessment to use it?
Tests: Contents of a closed case
4. An alert is closed as a false positive. What must the case still carry?
Tests: Closing without weakening the record
5. Why must an operations decision be recorded with its time?
Tests: Why timestamps make a decision defensible
6. A finding in the safety zone is confirmed. What is the correct first response?
Tests: Responses in the safety zone