CompTIACompTIA
CS0-003 · Question #419
CS0-003 Question #419: Real Exam Question with Answer & Explanation
Sign in or unlock CS0-003 to reveal the answer and full explanation for question #419. The question stem and answer options stay visible for context.
Submitted by akirajp· Mar 6, 2026Incident Response and Management
Question
Following an attack, an analyst needs to provide a summary of the event to the Chief Information Security Officer. The summary needs to include the who-what-when information and evaluate the effectiveness of the plans in place. Which of the following incident management life cycle processes does this describe?
Options
- ABusiness continuity plan
- BLessons learned
- CForensic analysis
- DIncident response plan
Unlock CS0-003 to see the answer
You've previewed enough free CS0-003 questions. Unlock CS0-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Lessons learned#Incident reporting#Incident response lifecycle#Post-incident review