IntermediatePhone
2 min
Incident Response Phases
SREIncident ManagementDevOps
Advertisement
Interview Question
Briefly explain the main phases of an incident response process.
Key Points to Cover
- Phases: Preparation → Detection → Containment → Eradication → Recovery → Lessons Learned
- Goal: minimize downtime, reduce MTTR, improve future prevention
- Involves coordinated cross-team communication and tooling
Evaluation Rubric
Lists key phases correctly40% weight
Connects phases to business goals30% weight
Mentions communication/tooling aspects30% weight
Hints
- 💡Follow NIST IR lifecycle structure.
Potential Follow-up Questions
- ❓What’s MTTR vs MTTD?
- ❓How do you handle incident retrospectives?
Advertisement