CompTIA Security+

Which is the correct order of the incident response process?

1. APreparation, detection, containment, eradication, recovery, lessons learnedCorrecta
2. BRecovery, containment, detection, preparation, lessons learned
3. CDetection, preparation, recovery, containment, eradication
4. DContainment, detection, recovery, preparation, eradication

Por qué: A standard incident response lifecycle proceeds through preparation, detection and analysis, containment, eradication, recovery, and lessons learned. Preparation comes first so the team is ready before an incident. Lessons learned closes the loop to improve future response.

Which type of encryption uses the same key to encrypt and decrypt data?

1. AAsymmetric
2. BHashing
3. CSymmetricCorrecta
4. DSteganographic

Por qué: Symmetric encryption uses a single shared secret key for both encryption and decryption, such as AES. It is fast and suited to bulk data. The main challenge is securely distributing the shared key.