During the detection and analysis phase of the NIST incident response process life cycle, which sign category is used to describe that an incident might occur in the future?

  • attrition
  • indicator
  • precursor
  • impersonation

Explanation & Hint:

There are two categories for the signs of an incident:

Precursor – a sign that an incident might occur in the future
Indicator – a sign that an incident might already have occurred or is currently occurring

For more Questions and Answers:

CyberOps Associate (200-201) Certification Practice Exam Answers Full 100%