CompTIA
CAS-003 · Question #111
CAS-003 Question #111: Real Exam Question with Answer & Explanation
The correct answer is D: Discussion of event timeline. Lessons learned process is the sixth step in the Incident Response process. Everybody that was involved in the process reviews what happened and why it happened. It is during this step that they determine what changes should be introduced to prevent future problems.
Question
A security officer is leading a lessons learned meeting. Which of the following should be components of that meeting? (Select TWO).
Options
- ADemonstration of IPS system
- BReview vendor selection process
- CCalculate the ALE for the event
- DDiscussion of event timeline
- EAssigning of follow up items
Explanation
Lessons learned process is the sixth step in the Incident Response process. Everybody that was involved in the process reviews what happened and why it happened. It is during this step that they determine what changes should be introduced to prevent future problems.
Community Discussion
No community discussion yet for this question.