CompTIA
CAS-003 · Question #99
CAS-003 Question #99: Real Exam Question with Answer & Explanation
The correct answer is B: During the Lessons Learned phase. The Lessons Learned phase is the final step in the Incident Response process, when everyone involved reviews what happened and why.
Question
A large organization has recently suffered a massive credit card breach. During the months of Incident Response, there were multiple attempts to assign blame for whose fault it was that the incident occurred. In which part of the incident response phase would this be addressed in a controlled and productive manner?
Options
- ADuring the Identification Phase
- BDuring the Lessons Learned phase
- CDuring the Containment Phase
- DDuring the Preparation Phase
Explanation
The Lessons Learned phase is the final step in the Incident Response process, when everyone involved reviews what happened and why.
Community Discussion
No community discussion yet for this question.