CompTIA CySA+ (CS0-002) — Question 110

During a cyber incident, which of the following is the BEST course of action?

Answer options

• A. Switch to using a preapproved, secure, third-party communication system.
• B. Keep the entire company informed to ensure transparency and integrity during the incident.
• C. Restrict customer communication until the severity of the breach is confirmed.
• D. Limit communications to preauthorized parties to ensure response efforts remain confidential.

Correct answer: A

Explanation

Using a preapproved, secure, third-party communication system is crucial during a cyber incident to ensure that sensitive information is protected and that communication is efficient. Keeping the entire company informed may lead to unnecessary panic or information leaks, while restricting customer communications can damage trust. Limiting communications to preauthorized parties might hinder the response if critical information is not shared promptly.