Examice

Exam GCIH All QuestionsBrowse all questions from this exam

Question 173

What shortcoming of the traditional PICERL incident response model is addressed by adopting a dynamic incident response model like DAIR?

Linear approach imparts the success of response activities

Inability to enforce written policies and procedures during an investigation

No differentiation between short and longterm containment tactics

Steps are continually revisited in a loop with no clear endpoint

Correct Answer: A

The traditional PICERL (Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned) incident response model follows a linear approach where each step is performed in sequence. This linear approach can limit the effectiveness and flexibility needed during an incident response because real-world incidents often require dynamically revisiting and adjusting earlier steps based on new information or evolving threats. Adopting a dynamic incident response model like DAIR addresses this shortcoming by allowing more flexibility and adaptation during the response process.

Discussion

XBalOption: A

I think the answer is "A"

Vikt0rOption: C

I believe the answer is C.

strale

Agree, option C is correct

tp9222Option: A

The traditional PICERL model (Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned) follows a linear approach where each step is performed in sequence. This can limit the effectiveness and flexibility needed during an incident response because real-world incidents often require revisiting and adjusting earlier steps based on new information or evolving threats.