After an incident response exercise, a security administrator reviews the following table: Which of the following should the administrator do to best support rapid incident response in the future?

The correct answer is B. Enable dashboards for service status monitoring. Enabling dashboards for service status monitoring is the best action to support rapid incident response. Dashboards provide real-time visibility into the status of critical systems, enabling quicker identification of issues and a more informed, proactive response during an…

Submitted by stefanr· Mar 6, 2026Security Operations

Question

After an incident response exercise, a security administrator reviews the following table:

Which of the following should the administrator do to best support rapid incident response in the future?

Exhibits

Options

AAutomate alerting to IT support for phone system outages.
BEnable dashboards for service status monitoring
CSend emails for failed log-In attempts on the public website
DConfigure automated Isolation of human resources systems

How the community answered

(26 responses)

A
4% (1)
B
81% (21)
C
4% (1)
D
12% (3)

Explanation

Enabling dashboards for service status monitoring is the best action to support rapid incident response. Dashboards provide real-time visibility into the status of critical systems, enabling quicker identification of issues and a more informed, proactive response during an incident. By having a centralized view of service status, the security administrator can respond more quickly and efficiently to any disruptions.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice