nerdexam
CompTIA

SY0-701 · Question #338

Which of the following phases of an incident response involves generating reports?

The correct answer is C. Lessons learned. The lessons learned phase of an incident response process involves reviewing the incident and generating reports. This phase helps identify what went well, what needs improvement, and what changes should be made to prevent future incidents. Documentation and reporting are…

Submitted by renata2k· Mar 6, 2026Security Operations

Question

Which of the following phases of an incident response involves generating reports?

Options

  • ARecovery
  • BPreparation
  • CLessons learned
  • DContainment

How the community answered

(58 responses)
  • B
    3% (2)
  • C
    95% (55)
  • D
    2% (1)

Explanation

The lessons learned phase of an incident response process involves reviewing the incident and generating reports. This phase helps identify what went well, what needs improvement, and what changes should be made to prevent future incidents. Documentation and reporting are essential parts of this phase to ensure that the findings are recorded and used for future planning. Recovery focuses on restoring services and normal operations. Preparation involves creating plans and policies for potential incidents, not reporting. Containment deals with isolating and mitigating the effects of the incident, not generating reports.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice