Incident Response & Forensics Practice Quiz - Master incident response & forensics with 25 comprehensive practice questions. Master the NIST IR lifecycle, playbooks, SIEM/SOAR, containment vs eradication vs recovery, chain of custody, tabletop exercises, threat hunting, and ransomware response. Essential for n10-009 certification exams. Requires Pro subscription ($9.99/month) which unlocks all 28 micro quiz topics + all certification practice exams. Free sample questions available below.
Master the NIST IR lifecycle, playbooks, SIEM/SOAR, containment vs eradication vs recovery, chain of custody, tabletop exercises, threat hunting, and ransomware response.
$9.99/month • IT certification practice test questions
This comprehensive Incident Response & Forensics quiz covers all essential concepts you need to master for your IT certification exam. With 25 carefully crafted questions, you'll test your knowledge across multiple difficulty levels.
In the NIST incident response lifecycle, which phase focuses on building tools, training staff, and establishing communication plans before any incident occurs?
✓ Correct Answer: A
Preparation is the first NIST phase, covering tooling, staffing, training, and communication plans built in advance. Containment limits an active incident's spread, eradication removes the threat, and detection and analysis identifies and scopes an incident already underway. Only preparation happens before an incident exists.
What is the primary purpose of maintaining a chain of custody during a forensic investigation?
✓ Correct Answer: B
Chain of custody is the chronological record of who collected, accessed, and transferred evidence, which preserves admissibility and integrity. Encryption protects confidentiality but is not the chain's purpose, compression addresses storage, and severity rating is a triage activity unrelated to custody tracking.
Want to practice all 25 questions with instant feedback?
Plus get access to 27 more topics + all certification exams
Get Pro - $9.99/monthUnderstanding Incident Response & Forensics is crucial for passing your IT certification exam. This topic frequently appears in n10-009 exams and represents fundamental knowledge that IT professionals use daily.
Our 25-question quiz covers real-world scenarios and exam-style questions to ensure you're fully prepared. Each question includes detailed explanations to reinforce your learning.
Questions
25 Questions
Duration
~15 minutes
Difficulty
Mixed Levels
This quiz contains 25 comprehensive questions covering all aspects of Incident Response & Forensics. Questions range from easy to hard difficulty levels to thoroughly test your knowledge.
This topic is specifically relevant for n10-009 certification exams. Understanding Incident Response & Forensics is essential for passing these exams.
Yes, micro quizzes are a Pro-only feature. With a Pro subscription ($9.99/month or $99/year), you get unlimited access to all 28 micro quiz topics plus all certification practice exams.
Absolutely! You can retake the quiz as many times as you want. Questions are randomly shuffled each time, so you'll get great practice reinforcing your knowledge.
One subscription unlocks all 28 micro quiz topics + all certification exams
Including this Incident Response & Forensics quiz plus hundreds of certification practice questions
All content included • $9.99/month or $99/year • 7-day money-back guarantee