Study. uk . com
  1. Home
  2. All questions
  3. Question 500

CompTIA Security+ study material · question 500 of 611

Which dependency is most likely to delay an incident response if it was not settled in advance?

  1. The choice of forensic imaging tool
  2. The log retention period
  3. The roles of legal, communications and human resources
  4. The vulnerability scanner's licence
Show the answer

Answer: C. The roles of legal, communications and human resources

Incident response depends on parties outside the team, whose authority and involvement must be agreed beforehand.

Source: NIST SP 800-61 Rev. 2 (NIST) — SP 800-61 Rev. 2 § 2.3.4 Incident Response Team Dependencies

Challenge yourself on this topic → Study as cards