CompTIA CySA+ (CS0-003) — Question 367
As part of an incident investigation, an analyst creates a detailed document that describes all activities, timelines, root causes, and mitigation actions. Which of the following reports is the analyst creating?
Answer options
- A. Lessons learned
- B. Business impact analysis
- C. Tabletop exercise
- D. Change control
Correct answer: A
Explanation
The correct answer is A, Lessons learned, as it captures insights and reflections on an incident's response, including root causes and corrective actions. Options B, C, and D refer to different processes or analyses that do not focus on documenting incident responses and learnings.