Certified Incident Handler (CIH) Practice Ecam

Which characteristic is important for an incident handler when responding to security incidents?

1. Proactive approach

2. Defensive strategies

3. Reactive approach

4. Invasive tactics

The correct answer is: Proactive approach

A proactive approach is crucial for an incident handler because it emphasizes anticipation and preparation for potential security incidents before they occur. By adopting this mindset, an incident handler can implement preventive measures such as regular security assessments, employee training, and system hardening to minimize vulnerabilities. This forward-thinking strategy allows for early detection of threats and reduces the impact of incidents when they do arise. In contrast, defensive strategies mainly focus on protecting systems after an attack has been identified, and a purely reactive approach waits for incidents to occur before taking action. While these methods have their place, they do not address the underlying vulnerabilities or reduce the likelihood of incidents. Invasive tactics, on the other hand, may lead to unnecessary risks and complications, often violating privacy or ethical standards. Therefore, a proactive approach stands out as the most effective and responsible characteristic for efficient incident response.