Which category includes Exercise/Network Defense Testing in Federal Agency Incident Reporting Categories?

• A. CAT 0
• B. CAT 1
• C. CAT 2
• D. CAT 3

Answer: (A)

This question tests identifying non-events versus real incidents in the incident reporting framework. Category 0 is used for non-incidents, including exercises and network defense testing. These activities are planned and controlled, do not cause actual harm or impact to operations, and are meant to improve readiness. Because Exercise/Network Defense Testing isn’t a real security incident, it fits Category 0. Higher categories cover events that involve real incidents with actual impact to networks, data, or operations.