exam questions

Exam CS0-003 All Questions

View all questions & answers for the CS0-003 exam

Exam CS0-003 topic 1 question 301 discussion

Actual exam question from CompTIA's CS0-003
Question #: 301
Topic #: 1
[All CS0-003 Questions]

A new SOC manager reviewed findings regarding the strengths and weaknesses of the last tabletop exercise in order to make improvements. Which of the following should the SOC manager utilize to improve the process?

  • A. The most recent audit report
  • B. The incident response playbook
  • C. The incident response plan
  • D. The lessons-learned register
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
iliecomptia
1 week, 2 days ago
Selected Answer: D
From study guide page 160: Incident Response Plan Update The conclusions of the lessons learned report should drive changes to incident response. This might involve small tweaks to procedures, better explanations or greater clarity for incident handlers, new templates for communicating with trusted parties, or major changes to the security controls used. Updates to incident response procedures require updated training and testing programs.
upvoted 1 times
...
1403ad2
1 month, 4 weeks ago
Selected Answer: D
i think D would be the best to review findings that have input
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago