Dell-EMC
D-CSF-SC-01 · Question #49
After a cybersecurity incident, which Respond Function activity focuses on assessing what went well and what could be improved?
The correct answer is C. After-action review. See the full explanation below for the reasoning.
Question
After a cybersecurity incident, which Respond Function activity focuses on assessing what went well and what could be improved?
Options
- AThreat intelligence gathering
- BRoot cause analysis
- CAfter-action review
- DContinuous monitoring
How the community answered
(56 responses)- A4% (2)
- B14% (8)
- C73% (41)
- D9% (5)
Community Discussion
No community discussion yet for this question.