Exam CS0-002 topic 1 question 124 discussion

Keyword here is Lessons Learned. This phase of IR is used to improve security measures and IR handling. Company leadership should be involved in that

Lessons learned will be pushed up to company leadership

D. The legal team. It is important to notify the legal team in the event of a security breach, as they may need to handle legal implications and ensure compliance with relevant laws and regulations. The incident response team should also inform company leadership, as they will need to be aware of the situation and any potential impact on the company's reputation. Depending on the severity and scope of the breach, customers may also need to be notified. The human resources department may also be involved in the aftermath of a security breach, but is not typically the first group to be notified in this type of situation.

just need to read the scenario fully. it is a lessons learned exercise. kick it up to leadership

D. The legal team. Pure use of English here, could have gained access (not did not), mitigate significant damage (meaning theres likely damange but insignificant), I believe the legal team should be notified.

C is correct, there was no actual breach. Lessons learnt is an internal excercise.

answer should be customers. This involves credit card

C - company leadership

agreed. C