Certified Incident Handler (ECIH v3) — Question 13

US-CERT and Federal civilian agencies use the reporting timeframe criteria in the federal agency reporting categorization. What is the timeframe required to report an incident under the CAT 4 Federal Agency category?

Answer options

• A. Weekly
• B. Within four (4) hours of discovery/detection if the successful attack is still ongoing and agency is unable to successfully mitigate activity
• C. Within two (2) hours of discovery/detection
• D. Monthly

Correct answer: A

Explanation

The correct answer is A, as incidents under the CAT 4 Federal Agency category require reporting on a weekly basis. Options B and C specify much shorter timeframes that are not applicable for this category, and option D suggests a longer timeframe that does not meet the CAT 4 requirements.