CompTIA Security+

Which is the correct order of the incident response process?

1. APreparation, detection, containment, eradication, recovery, lessons learned正确
2. BRecovery, containment, detection, preparation, lessons learned
3. CDetection, preparation, recovery, containment, eradication
4. DContainment, detection, recovery, preparation, eradication

为什么: A standard incident response lifecycle proceeds through preparation, detection and analysis, containment, eradication, recovery, and lessons learned. Preparation comes first so the team is ready before an incident. Lessons learned closes the loop to improve future response.

Which type of encryption uses the same key to encrypt and decrypt data?

1. AAsymmetric
2. BHashing
3. CSymmetric正确
4. DSteganographic

为什么: Symmetric encryption uses a single shared secret key for both encryption and decryption, such as AES. It is fast and suited to bulk data. The main challenge is securely distributing the shared key.