CompTIA Security+

Which is the correct order of the incident response process?

1. APreparation, detection, containment, eradication, recovery, lessons learnedĐúng
2. BRecovery, containment, detection, preparation, lessons learned
3. CDetection, preparation, recovery, containment, eradication
4. DContainment, detection, recovery, preparation, eradication

Vì sao: A standard incident response lifecycle proceeds through preparation, detection and analysis, containment, eradication, recovery, and lessons learned. Preparation comes first so the team is ready before an incident. Lessons learned closes the loop to improve future response.

Which type of encryption uses the same key to encrypt and decrypt data?

1. AAsymmetric
2. BHashing
3. CSymmetricĐúng
4. DSteganographic

Vì sao: Symmetric encryption uses a single shared secret key for both encryption and decryption, such as AES. It is fast and suited to bulk data. The main challenge is securely distributing the shared key.