Simulated Incident Response Exercise Questions

Practical hands on exercise that asks candidates to apply incident response procedures to a realistic scenario using provided telemetry and artifacts. The simulation evaluates initial detection and triage, evidence collection and timeline building, containment and eradication choices, remediation and recovery planning, internal and external communications, time bound decision making, and immediate lessons learned that feed into post incident action items.