300-215 · Question #31
An organization recovered from a recent ransomware outbreak that resulted in significant business damage. Leadership requested a report that identifies the problems that triggered the incident and…
The correct answer is B. cause and effect. To prepare a post-incident report, the cause of the incident (what enabled it) and the effect (what damage was done) are the primary components analyzed first. This allows teams to understand vulnerabilities exploited and the consequences, forming the basis for corrective…
Question
An organization recovered from a recent ransomware outbreak that resulted in significant business damage. Leadership requested a report that identifies the problems that triggered the incident and the security team's approach to address these problems to prevent a reoccurrence. Which components of the incident should an engineer analyze first for this report?
Options
- Aimpact and flow
- Bcause and effect
- Crisk and RPN
- Dmotive and factors
How the community answered
(31 responses)- A16% (5)
- B74% (23)
- C6% (2)
- D3% (1)
Explanation
To prepare a post-incident report, the cause of the incident (what enabled it) and the effect (what damage was done) are the primary components analyzed first. This allows teams to understand vulnerabilities exploited and the consequences, forming the basis for corrective action. The Cisco CyberOps guide recommends beginning with root cause analysis followed by impact assessment to guide future prevention strategies.
Topics
Community Discussion
No community discussion yet for this question.