QUESTION: 49

Which of the following is an important aspect that should be included in the lessons-learned step after an incident?

Identify any improvements or changes in the incident response plan or procedures
Determine if an internal mistake was made and who did it so they do not repeat the error
Present all legal evidence collected and turn it over to iaw enforcement
Discuss the financial impact of the incident to determine if security controls are well spent

Answer(s): A

QUESTION: 50

The security operations team is required to consolidate several threat intelligence feeds due to redundant tools and portals.
Which of the following will best achieve the goal and maximize results?

Single pane of glass
Single sign-on
Data enrichment
Deduplication

Answer(s): A

Show Answer Next Question

QUESTION: 51

Which of the following would a security analyst most likely use to compare TTPs between different known adversaries of an organization?

MITRE ATT&CK
Cyber Kill Cham
OWASP
STIX/TAXII

Answer(s): A

Show Answer Next Question

An analyst is remediating items associated with a recent incident. The analyst has isolated the vulnerability and is actively removing it from the system.
Which of the following steps of the process does this describe?

Eradication
Recovery
Containment
Preparation

Answer(s): A

Show Answer Next Question

Free CompTIA CS0-003 Exam Braindumps (page: 14)

QUESTION: 49

QUESTION: 50

QUESTION: 51

QUESTION: 52

CS0-003 Exam Discussions & Posts