CompTIA CySA+ (CS0-003) — Question 59

An analyst is becoming overwhelmed with the number of events that need to be investigated for a timeline. Which of the following should the analyst focus on in order to move the incident forward?

Answer options

• A. Impact
• B. Vulnerability score
• C. Mean time to detect
• D. Isolation

Correct answer: A

Explanation

Focusing on the 'Impact' allows the analyst to assess the severity and potential consequences of the events, which is crucial for prioritizing responses. The other options, such as 'Vulnerability score,' 'Mean time to detect,' and 'Isolation,' while important, do not directly aid in determining the most pressing issues that need immediate attention.