CompTIA Security+

Which is the correct order of the incident response process?

1. APreparation, detection, containment, eradication, recovery, lessons learnedCorrect
2. BRecovery, containment, detection, preparation, lessons learned
3. CDetection, preparation, recovery, containment, eradication
4. DContainment, detection, recovery, preparation, eradication

Why: A standard incident response lifecycle proceeds through preparation, detection and analysis, containment, eradication, recovery, and lessons learned. Preparation comes first so the team is ready before an incident. Lessons learned closes the loop to improve future response.

Which type of encryption uses the same key to encrypt and decrypt data?

1. AAsymmetric
2. BHashing
3. CSymmetricCorrect
4. DSteganographic

Why: Symmetric encryption uses a single shared secret key for both encryption and decryption, such as AES. It is fast and suited to bulk data. The main challenge is securely distributing the shared key.