CS0-003 Question 130

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  "Visibility and reporting" points to detection, not response — MTTD measures how fast malicious actors are spotted, and you can't respond to what you haven't detected. Shortening MTTD is what leaves the attacker less time to move laterally; MTTR (respond) only starts counting after detection.

• Chose B1

  The goal is to reduce the time to prevent lateral movement and potential data exfiltration. To me this means the detection already occured. I vote for B.

• Chose A2

  Domain 4.3 – Apply communication and coordination strategies Emphasizes improving security operations metrics like MTTD to reduce the window of compromise and limit attacker movement.