Skip to content
Skills
Problems
Questions
Drills
Roles
Skills
Interview
Contest
Leaderboard
Problems
Questions
Drills
Roles
Skills
Interview
Contest
Leaderboard
Home
/
Cybersecurity Analyst
/
Questions
/
Incident Response
Cybersecurity Analyst
Incident Response questions
15 questions on Incident Response for cybersecurity analysts, easiest first.
Easy
2
Backups that survive ransomware
easy
Why chain of custody matters
easy
Medium
5
NIST incident response lifecycle
medium
Containing a hijacked Microsoft 365 account
medium
What EDR host isolation does
medium
What evidence to collect first
medium
File integrity alert on a web server
medium
Hard
8
Artefacts of PsExec lateral movement
hard
First move on an encrypting host
hard
Evicting a Golden Ticket attacker
hard
Password reset did not stop the attacker
hard
An impossible timeline
hard
Exfiltration before encryption
hard
Web server spawning a shell
hard
GDPR breach notification deadline
hard
