Great News!
Many students who study using our platform have reported that a large number of the practice questions here are very similar to those that appear in real exams. View Courses
Many students who study using our platform have reported that a large number of the practice questions here are very similar to those that appear in real exams. View Courses
Which of the following describes how a CSIRT lead determines who should be communicated with and when during a security incident?
The correct answer is: A. The lead should review what is documented in the incident response policy or plan
This is the correct answer because the incident response policy or plan outlines communication protocols, detailing who needs to be informed, when, and how. The CSIRT lead should follow these guidelines to ensure that communication is consistent and structured throughout the incident.
Why the Other Options Are Incorrect:
Management level members of the CSIRT should make that decision
The lead has the authority to decide who to communicate with at any time
Subject matter experts on the team should communicate with others within the specified area of expertise
No Payment Cards Needed
Discover a range of courses designed to provide you with the knowledge and skills needed to excel in your chosen field.
You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams
