1. When preparing an incident report, it is necessary to take into account the audience that will read it.

A) True
B) False

2. Which of these is a data source that can be leveraged in preparing an incident report?

A) Applications
B) Network/host devices
C) Forensic tools
D) All of the above

3. Incident responders should never include a root cause analysis as part of the incident report.

A) True
B) False

4. What is not part of a forensic report?

A) Tools utilized
B) Examiner biography / CV
C) Opinion
D) Exhibit list