100-160 Exam Preparation Material | Cisco Certified Support Technician (CCST) Cybersecurity

Explanation:
Option 1: Incorrect. The incident response process can be both proactive and reactive. While it does involve reacting to incidents that have already occurred, it also includes proactive measures to prevent incidents from happening again in the future.
Option 2: Incorrect. While incident response can involve proactive measures to prevent incidents, it is not solely focused on prevention. It also includes reacting to incidents that have already occurred.
Option 3: Correct. The incident response process is an iterative process that involves continuous improvement based on lessons learned. Organizations should regularly review and update their incident response plans to ensure they are effective and up to date.
Option 4: Incorrect. The incident response process is not a one-time process. It should be an ongoing and continuous process to address security incidents as they occur and to improve the incident response
capabilities of the organization.

Explanation:
Data integrity refers to the accuracy, consistency, and reliability of data throughout its lifecycle. It ensures that data remains unchanged and uncorrupted, regardless of unauthorized access or system failures.

Explanation:
A firewall is a network security device that acts as a barrier between internal and external networks. Its main purpose is to control and filter network traffic based on predetermined security policies. It examines packets entering or leaving the network and either allows or blocks them based on the configured rules.

Explanation:
RSA is considered a strong encryption algorithm because it uses asymmetric encryption, which means it uses different keys for encryption and decryption. RSA is widely used in secure communication protocols and provides a high level of security.

Explanation:
Conducting a forensic analysis is a recommended strategy for managing communication proactively after an event. When a security incident occurs, it is essential to investigate the nature of the incident,
determine its impact, and identify the root cause. Conducting a forensic analysis helps uncover valuable information such as the method of attack, affected systems, and potential weaknesses that can be addressed to prevent similar incidents in the future. This proactive approach facilitates the development of a more robust security posture.