1. An organisation is investigating a security attack on its systems. Which of these must it establish?
How data will be restored from backups
How the security policy will be updated
The type of attack and the severity level
How customers will be told about the breach
2. Why is it important to establish the severity of an attack during the investigation?
It decides how many backups need to be restored
It shows whether the threat was internal or external
It decides the level of response that is needed
It proves the disaster recovery plan has been followed