Exam Lead-Cybersecurity-Manager Topic 1 Question 32 Discussion

A computer security incident is best described as an event where an attacker exploits a vulnerability to command a botnet and launch a distributed denial-of-service (DDoS) attack on a web server. This type of incident involves unauthorized access and malicious activity aimed at disrupting the availability of a web service. Such incidents are typically included in the scope of security incidents because they involve breaches of security policy and pose significant risks to the affected systems. References include NIST SP 800-61, which defines and categorizes computer security incidents.