CompTIA CySA+ (CS0-003) — Question 330

A SOC manager reviews metrics from the last four weeks to investigate a recurring availability issue. The manager finds similar events correlating to the times of the reported issues. Which of the following methods would the manager most likely use to resolve the issue?

Answer options

• A. Vulnerability assessment
• B. Root cause analysis
• C. Recurrence reports
• D. Lessons learned

Correct answer: B

Explanation

The correct answer is B, Root cause analysis, because it focuses on identifying the fundamental reasons behind the recurring availability issue. Options A, C, and D do not directly address the need to find the underlying cause of the problem, making them less suitable for resolving the specific issue at hand.