CAS-005 · Question #79
After an incident occurred, a team reported during the lessons-learned review that the team. - Lost important Information for further analysis. - Did not utilize the chain of communication - Did not…
The correct answer is B. Building playbooks for different scenarios and performing regular table-top exercises. Building playbooks for different incident scenarios provides a structured, repeatable process for the team to follow, ensuring critical steps are followed, information is not lost, and communication is effectively managed. Regular table-top exercises help familiarize the team…
Question
After an incident occurred, a team reported during the lessons-learned review that the team.
- Lost important Information for further analysis.
- Did not utilize the chain of communication
- Did not follow the right steps for a proper response
Which of the following solutions is the best way to address these findinds?
Options
- ARequesting budget for better forensic tools to Improve technical capabilities for Incident response
- BBuilding playbooks for different scenarios and performing regular table-top exercises
- CRequiring professional incident response certifications tor each new team member
- DPublishing the incident response policy and enforcing it as part of the security awareness
How the community answered
(28 responses)- A18% (5)
- B46% (13)
- C7% (2)
- D29% (8)
Explanation
Building playbooks for different incident scenarios provides a structured, repeatable process for the team to follow, ensuring critical steps are followed, information is not lost, and communication is effectively managed. Regular table-top exercises help familiarize the team with these procedures, allowing them to practice and refine their response capabilities before a real incident occurs. This directly addresses the issues raised in the lessons-learned review.
Community Discussion
No community discussion yet for this question.