CompTIA CySA+ (CS0-003) — Question 232

Which of the following is the best metric to use when reviewing and addressing findings that caused an incident?

Answer options

• A. Mean time to restore
• B. Mean time to respond
• C. Mean time to remediate
• D. Mean time to detect

Correct answer: C

Explanation

The correct answer is C, Mean time to remediate, as it specifically measures the time taken to fix the issues that caused the incident. The other options, while relevant, focus on different aspects of incident management, such as restoration or detection, rather than addressing the root causes of the incident.