CompTIA CySA+ (CS0-003) — Question 379

Which of the following best describes root cause analysis?

Answer options

• A. It describes the tactics, techniques, and procedures used in an incident.
• B. It provides a detailed path outlining the origin of an issue and how to eliminate it permanently.
• C. It outlines the who-what-when-where-why, which is often used in conjunction with legal proceedings.
• D. It generates a report of ongoing activities, including what was done, what is being done, and what will be done next.

Correct answer: B

Explanation

The correct answer, B, accurately captures the essence of root cause analysis as it focuses on identifying the source of an issue and establishing a permanent solution. Option A discusses tactics used during an incident but does not pertain to root cause analysis. Option C addresses information useful in legal contexts, whereas option D relates to ongoing activities rather than identifying root causes.