What is the purpose or benefit of an after-action report in an incident response strategy?

A. To learn from events in order to improve future incident handling
B. To have law enforcement provide guidance on handling security breaches
C. To increase the sensitivity of incident detectors
D. To gain sufficient support from senior management

Answer: A. To learn from events in order to improve future incident handling

Computer Science & Information Technology

You might also like to view...

Which of the following audio file types is supported by all computers running Windows?

A) .mp3 B) .rm C) .wav D) .midi

Computer Science & Information Technology

What command enables you to bring up a utility to modify startup options in Windows?

A) MSCONFIG B) SERVICES.MSC C) DRWSTN32 D) PERFMON.MSC

Computer Science & Information Technology