A company had developed an incident response plan 18 months ago. Regular implementations of the response plan are carried out. No changes have been made to the response plan have been made since its…

The correct answer is C. The response plan does not cater to new services. So definitely the case here is that the incident response plan is not catering to newly created AWS keeps on changing and adding new services and hence the response plan must cater to these new services. Option A and B are invalid because we don't know this for a fact. Option D…

Submitted by kevin_r· Mar 6, 2026Management and Security Governance

Question

A company had developed an incident response plan 18 months ago. Regular implementations of the response plan are carried out. No changes have been made to the response plan have been made since its creation. Which of the following is a right statement with regards to the plan?

Options

AIt places too much emphasis on already implemented security controls.
BThe response plan is not implemented on a regular basis
CThe response plan does not cater to new services
DThe response plan is complete in its entirety

How the community answered

(53 responses)

A
8% (4)
B
2% (1)
C
77% (41)
D
13% (7)

Explanation

So definitely the case here is that the incident response plan is not catering to newly created AWS keeps on changing and adding new services and hence the response plan must cater to these new services. Option A and B are invalid because we don't know this for a fact. Option D is invalid because we know that the response plan is not complete, because it does not cater to new features of AWS https://aws.amazon.com/blogs/publicsector/buildins-a-cloud-specific-incident-response-plan

Topics

#incident response plan#plan maintenance#security governance#new services coverage

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice