CS0-003 Question 68

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C3

  The correct answer is C. Incident response plan, because it defines roles, responsibilities, escalation paths, and step-by-step actions so your team knows exactly who does what during and after a security event, while an A. Service-level agreement (SLA) sets measurable service targets between a provider and customer (uptime, response times, penalties) but does not assign incident tasks, a B. Change management plan governs how you request, approve, test, and implement system changes to reduce outages and risk but does not run incident command-and-control, and a D. Memorandum of understanding (MOU) documents a high-level agreement between parties to cooperate and share resources/information but usually lacks the operational detail needed to direct incident next steps.

• Chose C3

  The answer is C. Incident response plan.

• Chose C3

  To address the issue of determining who should conduct the next steps following a security event, the security team should create: C. Incident response plan Explanation: An incident response plan outlines the procedures, roles, and responsibilities for responding to security incidents within an organization. It provides clear guidance on how to handle different types of incidents, including who is responsible for what actions during and after an incident.