SOC › Module 6 › Lesson 5
Quiz — IR Lifecycle
APPLY: PICERL, IR roles, evidence hygiene; $HUNT_LAB incident stubs only.
Opening
IR lifecycle judgment.
Name PICERL stages and role boundaries — refuse unauthorized prod IR and attack repro.
Knowledge Check
IR lifecycle literacy uses:
Multiple choice
Knowledge Check
True or False: Lateral movement against prod is lab.
True or False
Knowledge Check
PICERL includes:
Multiple choice
Knowledge Check
IR lead role:
Multiple choice
Knowledge Check
True or False: Unauthorized prod incident notifications are lab.
True or False
Knowledge Check
Evidence chain of custody records:
Multiple choice
Knowledge Check
L2 analyst boundary:
Multiple choice
Knowledge Check
True or False: Hash falsification is acceptable lab.
True or False
Knowledge Check
Identification phase:
Multiple choice
Knowledge Check
Next:
Multiple choice
Answer all 10 knowledge checks to continue. (0/10 answered)