CompTIA CySA+ (CS0-001) — Question 4
Which of the following items represents a document that includes detailed information on when an incident was detected, how impactful the incident was, and how it was remediated, in addition to incident response effectiveness and any identified gaps needing improvement?
Answer options
- A. Forensic analysis report
- B. Chain of custody report
- C. Trends analysis report
- D. Lessons learned report
Correct answer: D
Explanation
The correct answer is D, as a Lessons learned report captures insights from incidents, including detection timing, impact, remediation efforts, response effectiveness, and areas for improvement. The other options do not encompass all these aspects; for instance, A focuses on forensic details, B deals with evidence handling, and C looks at patterns over time.