GIAC Certified Incident Handler (GCIH) — Question 65
Which activity helps readdress security tasks identified in past incident reports?
Answer options
- A. After Action Report
- B. Root cause analysis
- C. Follow-up review meetings
- D. Containment and eradication
Correct answer: B
Explanation
The correct answer is B, as root cause analysis involves investigating the underlying reasons for past incidents to prevent future occurrences. Options A and C are useful for reviewing incidents but do not specifically address the underlying causes, while D focuses on immediate response actions rather than long-term improvements.