Security Runbooks Design Quiz

What you'll be asked

1. What is the primary purpose of a security runbook during an incident?
2. When designing a runbook for a 'Phishing Email Detected' incident, which component is most critical for ensuring the response is actionable?
3. Which of the following best describes the 'Playbook' vs 'Runbook' distinction in incident response?
4. Why is it important to include an 'Out-of-Band' communication plan in a security runbook?
5. You are designing a runbook for automated containment. Why must you include 'fail-safe' or 'manual override' conditions?

Answers and explanations come after you submit.