CompTIA CySA+ (CS0-002) — Question 25

Which of the following incident response components can identify who is the liaison between multiple lines of business and the public?

Answer options

• A. Red-team analysis
• B. Escalation process and procedures
• C. Triage and analysis
• D. Communications plan

Correct answer: D

Explanation

The correct answer is D, as a Communications plan outlines how information is shared between the organization and external parties, including identifying key liaisons. The other options, such as Red-team analysis, Escalation process and procedures, and Triage and analysis, do not focus on communication roles or public relations.