CS0-003 Question 59

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C3

  It seems the most logical answer

• Chose C3

  The most likely reason to include lessons learned in an after-action report following a significant security incident is: C. To identify areas of improvement in the incident response process. Explanation: Lessons learned are a critical component of the incident response process. They serve the purpose of reflecting on what went well and what could have been done better during the incident response.