Certified Incident Handler (CIH) Practice Ecam

Which step reduces the risk of potential network-based incidents during preparation?

1. Increasing bandwidth

2. Conducting risk assessments

3. Enhancing password complexity

4. Upgrading all network devices

The correct answer is: Conducting risk assessments

Conducting risk assessments is a critical step in reducing the risk of potential network-based incidents during the preparation phase. This process involves identifying vulnerabilities, threats, and potential impacts on the network, which allows an organization to understand its security posture better. By evaluating what risks exist, organizations can prioritize security measures effectively and implement controls specifically tailored to mitigate those identified risks. Risk assessments provide valuable insights into the assets that need protection, the likelihood of various incidents occurring, and the potential consequences if those incidents do occur. This proactive approach helps IT teams make informed decisions about resource allocation, security policies, and incident response plans, ultimately creating a more robust defense against potential network-based threats. In contrast, while increasing bandwidth, enhancing password complexity, and upgrading network devices can contribute to overall network performance and security, they do not directly address the identification and prioritization of existing threats and vulnerabilities in a structured manner as conducting a risk assessment does.