Certified Incident Handler (CIH) Practice Ecam

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the Certified Incident Handler (CIH) Exam. Enhance your knowledge with interactive quizzes and detailed insights into cyber incident handling. Boost your exam readiness with our expert-designed questions!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Identify the responsibility assigned to Jack in the described scenario.

  1. Documenting the incident

  2. Collecting the information about the incident

  3. Securing the crime scene

  4. Analyzing physical evidence

The correct answer is: Collecting the information about the incident

In the context of incident management, collecting information about the incident is a crucial responsibility. This task involves gathering relevant data, evidence, and context surrounding the incident to understand what occurred effectively. It includes interviews with involved parties, retrieving log files, and collecting any other pertinent documentation or observations that can provide insight into the incident’s nature and extent. This action is foundational for subsequent steps in incident handling, such as analyzing the data to determine the cause or implementing measures to prevent future occurrences. Effective information collection informs decisions and strategies for response and recovery, making it a vital aspect of incident management. Collecting accurate and comprehensive information ensures that other team members, including those analyzing and documenting the incident, have the necessary context and details to perform their roles effectively.