GIAC Certified Incident Handler (GCIH) — Question 68

What shortcoming of the traditional PICERL incident response model is addressed by adopting a dynamic incident response model like DAIR?

Answer options

• A. Linear approach imparts the success of response activities
• B. Inability to enforce written policies and procedures during an investigation
• C. No differentiation between short and longterm containment tactics
• D. Steps are continually revisited in a loop with no clear endpoint

Correct answer: D

Explanation

The correct answer is D, as the DAIR model allows for iterative revisiting of steps, creating a more adaptive response process. In contrast, options A, B, and C highlight shortcomings that do not specifically address the cyclical nature of incident response process improvement that DAIR provides.