Courseiva
Incident ManagementeasyMultiple ChoiceObjective-mapped

CISM Incident Management Practice Question

In the context of incident severity classification, which of the following best describes a P3 (medium) incident?

⚠ Common exam trap

A common mix-up: candidates confuse 'limited impact' with 'minimal impact' — P3 requires a standard response during business hours, while P4 allows scheduled remediation, and mixing these up leads to selecting Option B.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Limited impact with standard response and no immediate escalation

A P3 (medium) incident is defined as having limited impact on business operations, allowing for a standard response during normal business hours without requiring immediate escalation. This classification typically applies to incidents that do not affect critical systems or sensitive data, and can be resolved through normal change management processes without urgent intervention.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Significant impact requiring management notification and business hours response

    Why it's wrong here

    This describes a P2 incident.

  • Minimal impact with scheduled remediation

    Why it's wrong here

    This describes a P4 incident.

  • Critical business impact requiring 24/7 response and executive notification

    Why it's wrong here

    This describes a P1 incident.

  • Limited impact with standard response and no immediate escalation

    Why this is correct

    This is the correct definition for P3.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

Courseiva writes every CISM question from scratch — 871 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISM exam.