Certificate of Cloud Security Knowledge (CCSK) — Question 172

At a minimum, how often should incident response testing occur?

Answer options

• A. Monthly
• B. Quarterly
• C. Whenever an event occurs
• D. Semi-annually
• E. Annually and whenever a significant change occurs

Correct answer: E

Explanation

The correct answer is E because incident response testing should be done annually as a standard practice, and additionally whenever significant changes are made to ensure the response plan remains effective. The other options suggest less frequent or inconsistent testing, which may leave the organization unprepared for incidents.