CompTIA CySA+ (CS0-003) — Question 380

Which of the following best explains the importance of utilizing an incident response playbook?

Answer options

• A. It prioritizes the business-critical assets for data recovery.
• B. It establishes actions to execute when inputs trigger an event.
• C. It documents the organization asset management and configuration.
• D. It defines how many disaster recovery sites should be staged.

Correct answer: B

Explanation

The correct answer, B, highlights that an incident response playbook outlines specific actions to take when certain events occur, ensuring a structured response. Options A, C, and D, while related to organizational preparedness, do not specifically address the procedural aspect of responding to incidents as effectively as option B does.