During incident triage, severity is assigned based on which factors?

Prepare for the CSS Mastery SAD Maintenance and CSA Stand Ups Test. With flashcards and multiple choice questions, ready yourself for the exam with hints and explanations for every question. Ace your exam today!

Multiple Choice

During incident triage, severity is assigned based on which factors?

The key idea here is that severity during incident triage is driven by the actual harm to users and the system, plus how hard it will be to recover. Specifically, you look at whether a service is down or degraded, how many users are affected, whether there’s any data loss or risk to data integrity, and how long it will take to restore normal service (the estimated effort and time). These factors together show the real impact on the business and prioritize response accordingly. The other factors listed don’t measure impact or recovery effort. Last maintenance window and time of day are scheduling/timing considerations, not how bad the incident is. The number of reports can indicate how widespread detection is, but it doesn’t by itself define the severity unless those reports map to actual impact.

The key idea here is that severity during incident triage is driven by the actual harm to users and the system, plus how hard it will be to recover. Specifically, you look at whether a service is down or degraded, how many users are affected, whether there’s any data loss or risk to data integrity, and how long it will take to restore normal service (the estimated effort and time). These factors together show the real impact on the business and prioritize response accordingly.

The other factors listed don’t measure impact or recovery effort. Last maintenance window and time of day are scheduling/timing considerations, not how bad the incident is. The number of reports can indicate how widespread detection is, but it doesn’t by itself define the severity unless those reports map to actual impact.

More practice questions