ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 313 - SY0-601 discussion

Report
Export

Which of the following processes would most likely help an organization that has conducted an incident response exercise to improve performance and identify challenges?

A.
Lessons learned
Answers
A.
Lessons learned
B.
Identification
Answers
B.
Identification
C.
Simulation
Answers
C.
Simulation
D.
Containment
Answers
D.
Containment
Suggested answer: A

Explanation:

Lessons learned is a process that would most likely help an organization that has conducted an incident response exercise to improve performance and identify challenges. Lessons learned is a process that involves reviewing and evaluating the incident response exercise to identify what went well, what went wrong, and what can be improved. Lessons learned can help an organization enhance its incident response capabilities, address any gaps or weaknesses, and update its incident response plan accordingly.

Reference: https://www.comptia.org/certifications/security#examdetails https://www.comptia.org/content/guides/comptia-security-sy0-601-exam-objectives https://www.sans.org/reading-room/whitepapers/incident/incident-handlers-handbook-33901

asked 02/10/2024
Higher System Consultancy
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first