Containment strategies in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main goal of containment strategies in cybersecurity?

The main goal is to stop the spread of a security incident or attack quickly to limit damage and protect other parts of the system.

beginner

Name two common containment strategies used during a cyber attack.

Two common strategies are network segmentation (isolating affected systems) and disabling compromised user accounts to prevent further access.

intermediate

Why is quick containment important after detecting a cybersecurity breach?

Quick containment reduces the risk of data loss, limits damage to systems, and helps maintain business operations by preventing the attacker from moving deeper into the network.

intermediate

What is the difference between 'hard containment' and 'soft containment'?

'Hard containment' involves completely isolating affected systems from the network, while 'soft containment' limits access or restricts certain functions without full isolation.

beginner

How does network segmentation help in containment?

Network segmentation divides a network into smaller parts, so if one segment is compromised, the attacker cannot easily access other segments, limiting the spread of the attack.

What is the primary purpose of containment in cybersecurity?

A To delete all data immediately

B To upgrade software

C To notify customers first

D To stop the attack from spreading

Containment aims to stop the attack from spreading to protect other systems.

Which of the following is a containment strategy?

A Phishing emails

B Network segmentation

C Installing new apps

D Ignoring alerts

Network segmentation isolates affected parts to contain the attack.

What does 'hard containment' mean?

A Completely isolating affected systems

B Softening security rules

C Backing up data

D Allowing limited access

'Hard containment' means fully isolating systems to stop attack spread.

Why is quick containment important?

A To improve user experience

B To increase network speed

C To reduce damage and data loss

D To delay response

Quick containment helps reduce damage and protect data.

Which action is NOT part of containment strategies?

A Ignoring the attack

B Isolating infected machines

C Limiting network access

D Disabling compromised accounts

Ignoring the attack does not help contain it.

Explain what containment strategies are and why they are important in cybersecurity.

Think about how stopping an attack quickly helps protect the whole system.

Describe two common containment methods and how they help during a cyber attack.

Consider how isolating parts of a network or blocking access can stop attackers.