CompTIA CySA+ (CS0-003) — Question 191

Which of the following best describes the importance of KPIs in an incident response exercise?

Answer options

• A. To identify the personal performance of each analyst
• B. To describe how incidents were resolved
• C. To reveal what the team needs to prioritize
• D. To expose which tools should be used

Correct answer: C

Explanation

The correct answer, C, highlights that KPIs help the team understand their priorities for incident management. Options A and B focus on individual performance and resolution explanations, which are not the main purpose of KPIs. Option D pertains to tool selection rather than prioritization of team efforts.