CompTIA
CAS-003 · Question #99
A large organization has recently suffered a massive credit card breach. During the months of Incident Response, there were multiple attempts to assign blame for whose fault it was that the incident…
The correct answer is B. During the Lessons Learned phase. The Lessons Learned phase is the final step in the Incident Response process, when everyone involved reviews what happened and why.
Enterprise Security Operations
Question
A large organization has recently suffered a massive credit card breach. During the months of Incident Response, there were multiple attempts to assign blame for whose fault it was that the incident occurred. In which part of the incident response phase would this be addressed in a controlled and productive manner?
Options
- ADuring the Identification Phase
- BDuring the Lessons Learned phase
- CDuring the Containment Phase
- DDuring the Preparation Phase
How the community answered
(34 responses)- A3% (1)
- B94% (32)
- C3% (1)
Explanation
The Lessons Learned phase is the final step in the Incident Response process, when everyone involved reviews what happened and why.
Topics
#incident response#lessons learned#post-incident review#IR phases
Community Discussion
No community discussion yet for this question.