Exam 212-89 topic 1 question 4 discussion

Anyone did the exam recently and can tell if these questions are enough to pass?

Answer should definitely be a middle level incident.

answer :B Middle Level incidents(Mudule02 P230) Unfriendly employee terminatiom unauthorized storing and processing of data personal theft of data related to a computer incident

Module 2 Page 231

"within few hours" = mid-level

Are these answers and questions legit ?

I'm torn between High level and middle level. Question doesnt sound that urgent though. For all we know, that sensitive access control information that was passed doesn't have access to all critical information, and only to few ones. In that case, I'm thinking its only middle level since it is expected to be resolved within a few hours on the same day. If it is expected to be resolved as urgently as possible, then my answer would be High level. What do you guys think?

I think B is correct. Keyword is that it should be addressed within a few hours. Passing sensitive access control information can lead to unauthorized access to systems, data storing and processing, and theft of data which are all symptoms of Middle Level incident. If categorized as High level, then it should be resolved as soon as possible.

Answer B (Middle level Incident) - page 233 Middle-level Incidents Middle-level incidents are more severe events that pose a moderate threat to an organization. Such incidents require further investigation by incident handlers to analyze their impact and severity. These incidents can result in a false positive and may interrupt organizational operations to some extent. It is essential for incident handlers to handle such incidents within few hours of their detection. During middle-level incidents, organizations may be unable to provide essential services to a group of system users for a certain period of time; this may be slightly inconvenient for customers.

Answer B (Middle level Incident) Module 2 - Page 231 {"It is essential for the incidents to be addressed within a few hours of their occurrence" }

Middle level incident

This is high level incident since it poses a threat which may lead to bad name of the organization, right?

Answer is High level Incident