What is the US-CERT incident category name and reporting timeframe for a CAT-2 incident?

What is the US-CERT incident category name and reporting timeframe for a CAT-2 incident?

• A. Unauthorized Access; 1 hour
• B. Denial of Service; 2 hours
• C. Malware Attack; 4 hours
• D. Information Theft; 24 hours

Answer: (B)

For US-CERT categorization, a CAT-2 incident refers to a Denial of Service (DoS) event. The classification of CAT-2 emphasizes the importance of swift communication regarding incidents that significantly impact organizations and their resources. The timeframe for reporting such incidents is set at 2 hours, reflecting the urgency and potential for widespread disruption associated with denial of service incidents. Rapid reporting is crucial to initiate a response, mitigate impacts, and prevent escalation. The focus on reporting Denial of Service incidents promptly highlights the critical nature of these events, as they can incapacitate systems and networks, posing a risk to the integrity and availability of services. Hence, the correct identification of CAT-2 incidents and their associated reporting timeline underscores the necessity for timely information sharing and response in the realm of federal IT security.

For US-CERT categorization, a CAT-2 incident refers to a Denial of Service (DoS) event. The classification of CAT-2 emphasizes the importance of swift communication regarding incidents that significantly impact organizations and their resources. The timeframe for reporting such incidents is set at 2 hours, reflecting the urgency and potential for widespread disruption associated with denial of service incidents. Rapid reporting is crucial to initiate a response, mitigate impacts, and prevent escalation.

The focus on reporting Denial of Service incidents promptly highlights the critical nature of these events, as they can incapacitate systems and networks, posing a risk to the integrity and availability of services. Hence, the correct identification of CAT-2 incidents and their associated reporting timeline underscores the necessity for timely information sharing and response in the realm of federal IT security.