> For the complete documentation index, see [llms.txt](https://davidjosearaujo.gitbook.io/online-courses/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidjosearaujo.gitbook.io/online-courses/cyber-incident-response/incident-response-fundamentals/quiz.md).

# Quiz

## Question 1

It is MOST important that your incident response policy do which of the following?

<details>

<summary>Solution</summary>

Align with overall business or agency security strategy

</details>

## Question 2

Based on the introduction course and "IR definitions" module, which of the following is LEAST likely to be a triggering event?

<details>

<summary>Solution</summary>

An article in the news about a new malware outbreak

</details>

## Question 3

Bob, the incident response manager, has just been given the task of building an internal IR team. Which of these steps should Bob execute first?

<details>

<summary>Solution</summary>

Assess existing skill sets

</details>