hardMultiple SelectObjective-mapped
SSCP Practice Question: Which THREE steps are essential during the…
Which THREE steps are essential during the identification phase of incident response?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Monitor logs and alerts
During the identification phase of incident response, the essential steps are monitoring logs and alerts (C) to detect potential incidents, determining the scope of the incident (D) to understand its impact, and classifying incident severity (E) to prioritize response. Options A and B are not part of identification; eradication occurs later in the response phase, and stakeholder notification typically happens after identification and analysis.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Eradicate the threat
Why it's wrong here
Eradication occurs after identification and containment.
- ✗
Notify stakeholders
Why it's wrong here
Notification typically happens after identification and initial containment.
- ✓
Monitor logs and alerts
Why this is correct
Continuous monitoring is key to detecting anomalies.
- ✓
Determine scope of incident
Why this is correct
Understanding the affected systems and data is critical.
- ✓
Classify incident severity
Why this is correct
Severity classification guides the response priority.
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.