CompTIA Security+ (SY0-501) — Question 1007

During a data breach cleanup, it is discovered that not all of the sites involved have the necessary data wiping tools. The necessary tools are quickly distributed to the required technicians, but when should this problem BEST be revisited?

Answer options

• A. Reporting
• B. Preparation
• C. Mitigation
• D. Lessons Learned

Correct answer: D

Explanation

The correct answer is D, as the 'Lessons Learned' phase is crucial for evaluating what went wrong and ensuring that all necessary tools are available for future incidents. The other options focus on different stages in incident response, such as reporting or preparation, which are not aimed at reassessing issues post-incident.