Exam CS0-001 topic 1 question 349 discussion

Actual exam question from CompTIA's CS0-001

Question #: 349
Topic #: 1

During a tabletop exercise, it is determined that a security analyst is required to ensure patching and scan reports are available during an incident, as well as documentation of all critical systems. To which of the following stakeholders should the analyst provide the reports?

A. Management
B. Affected vendors
C. Security operations
D. Legal

Show Suggested Answer

Suggested Answer: A 🗳️

by Blind_Hatred at June 26, 2020, 8:15 a.m.

Comments

Submit Cancel

Blind_Hatred

4 years, 10 months ago

The incident responders should have this information. While it's technically not a bad idea for management to have this information as well, Security Operations should have this information for sure.

upvoted 2 times

Blind_Hatred

4 years, 10 months ago

That said, the term "stakeholder" confuses me. Stakeholder usually mean someone who is not directly involved in the Incident Response process but do have a hand in helping where need be. CySA only defines a couple of these stakeholders: Legal, Marketing, Management and HR.

upvoted 3 times

Blind_Hatred

4 years, 10 months ago

A line from my book: "Stakeholders The term stakeholder is broad and could include a very large set of people. For the purposes of the CySA+ exam, what we call IR stakeholders are those individuals and teams who are part of your organization and have a role in helping with some aspects of some incident response. They each have a critical role to play in some (maybe even most) but not all responses."

upvoted 1 times

...

Exam CS0-001 All Questions

View all questions & answers for the CS0-001 exam

Exam CS0-001 topic 1 question 349 discussion

Comments

Blind_Hatred

Blind_Hatred

Blind_Hatred

SY0-701