nerdexam
CompTIA

CS0-003 · Question #91

A help desk technician inadvertently sent the credentials of the company's CRM n clear text to an employee's personal email account. The technician then reset the employee's account using the…

The correct answer is B. Prepare an incident summary report. A post-mortem report is not mentioned in the NIST standard. https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf

Submitted by cyberguy42· Mar 6, 2026Incident Response and Management

Question

A help desk technician inadvertently sent the credentials of the company's CRM n clear text to an employee's personal email account. The technician then reset the employee's account using the appropriate process and the employee's corporate email, and notified the security team of the incident According to the incident response procedure, which of the following should the security team do NEXT?

Options

  • AContact the CRM vendor.
  • BPrepare an incident summary report.
  • CPerform postmortem data correlation.
  • DUpdate the incident response plan.

How the community answered

(47 responses)
  • A
    4% (2)
  • B
    94% (44)
  • C
    2% (1)

Explanation

A post-mortem report is not mentioned in the NIST standard. https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf

Topics

#Incident response#Incident reporting#Credential compromise#Data breach#Post-incident steps

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CS0-003 Practice