Certified Incident Handler (CIH) Practice Ecam

Which among the following would be a preventive measure against DDoS incidents?

1. Ignoring alert systems

2. Establishing a communication plan

3. Increasing bandwidth only during a threat

4. Regularly reviewing security policies

The correct answer is: Regularly reviewing security policies

Regularly reviewing security policies is a vital preventive measure against DDoS incidents because it ensures that the organization's defenses are up-to-date and aligned with current threat landscapes. By frequently assessing and updating security protocols, an organization can identify potential vulnerabilities and weaknesses that could be exploited during a DDoS attack. This proactive stance allows for adjustments to be made in response to evolving tactics used by attackers, ensuring that the organization maintains resilience against such threats. Establishing a communication plan can support incident response but is not a direct prevention method. Increasing bandwidth only during a threat is reactive and may not adequately protect against sustained attacks. Ignoring alert systems completely undermines the ability to detect and respond to potential incidents, exposing the organization to greater risk.