A new SOC manager reviewed findings regarding the strengths and weaknesses of the last tabletop exercise in order to make improvements. Which of the following should the SOC manager utilize to…

The correct answer is D. The lessons-learned register. The lessons-learned register is an essential document that captures insights and feedback from past exercises or incidents, highlighting what went well and what did not. By utilizing this register, the SOC manager can identify specific areas for improvement and develop…

Submitted by tarun92· Mar 6, 2026Incident Response Management

Question

A new SOC manager reviewed findings regarding the strengths and weaknesses of the last tabletop exercise in order to make improvements. Which of the following should the SOC manager utilize to improve the process?

Options

AThe most recent audit report
BThe incident response playbook
CThe incident response plan
DThe lessons-learned register

How the community answered

(33 responses)

A
3% (1)
B
6% (2)
D
91% (30)

Explanation

The lessons-learned register is an essential document that captures insights and feedback from past exercises or incidents, highlighting what went well and what did not. By utilizing this register, the SOC manager can identify specific areas for improvement and develop actionable steps to enhance future response efforts.

Topics

#tabletop exercise#lessons learned#incident response improvement

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice