CGRC Control Implementation Practice Question
Which THREE of the following are elements of a secure incident response control set?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Establishing a dedicated Incident Response Team (IRT)
Preparation, identification, and containment are foundational phases of the incident response lifecycle.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Establishing a dedicated Incident Response Team (IRT)
Why this is correct
An IRT is essential for professional response.
- ✗
Sharing sensitive server logs on a public forum
Why it's wrong here
This violates confidentiality.
- ✓
Implementing a SIEM for log analysis and alerting
Why this is correct
Monitoring tools are critical for identification.
- ✓
Maintaining an updated Incident Response Plan (IRP)
Why this is correct
The plan provides the procedures for responding to incidents.
- ✗
Disabling all security controls during an investigation
Why it's wrong here
This would worsen the impact of an incident.
About these practice questions
One of 199 original CGRC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official (ISC)² exam blueprint
This CGRC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CGRC exam.