200-201 › Security Policies and Procedures

Security Policies and Procedures Practice Questions

This domain covers incident response per NIST SP 800-61 (preparation, detection and analysis, containment/eradication/recovery, post-incident), plus policy documents such as AUP, data classification, and evidence handling. Questions are scenario-based: you identify the correct IR phase, choose containment actions that preserve volatile data, and apply chain-of-custody and forensic integrity practices.