From a business perspective, the GREATEST benefit of an incident response plan is that it:

Question

Options

• Alimits the negative impact of disruptive events
• Bensures compliance with regulatory requirements
• Cimproves security responsiveness to disruptive events
• Dpromotes efficiency by providing predefined response procedures

• A
  80% (24)
• B
  10% (3)
• C
  7% (2)
• D
  3% (1)

Explanation

From a business perspective, the primary concern is protecting organizational value - revenue, reputation, and operations. Limiting the negative impact of disruptive events (A) directly addresses this by minimizing downtime, financial loss, and damage to stakeholders, which is the overarching business goal that all other response activities serve.

Why the distractors fall short:

• B (regulatory compliance) is a legal/compliance benefit, not the greatest business benefit - compliance is a constraint, not the core purpose of incident response.
• C (security responsiveness) is an operational/technical benefit; improving how quickly security teams react is a means to limiting impact, not the end goal itself.
• D (predefined procedures) describes an efficiency benefit, which is an internal process advantage - valuable, but secondary to actually reducing business harm.

Memory tip: Think of it as a triage hierarchy - all the other options (compliance, speed, efficiency) are how you respond, but limiting negative impact is why the business cares about having a plan at all. When a question asks for the "greatest business benefit," look for the answer that speaks to outcomes (impact, loss, continuity), not processes.

No community discussion yet for this question.