CompTIA Security+ SY0-501

Set · v.2020-01-22

A CSIRT has completed restoration procedures related to a breach of sensitive data is creating documentation used to improve the organization’s security posture.
The team has been specifically tasked to address logical controls in their suggestions. Which of the following would be MOST beneficial to include in lessons
learned documentation? (Choose two.)

Select all that applyA list of policies, which should be revised to provide better clarity to employees regarding acceptable useRecommendations relating to improved log correlation and alerting toolsData from the organization’s IDS/IPS tools, which show the timeline of the breach and the activities executed by the attackerA list of potential improvements to the organization’s NAC capabilities, which would improve AAA within the environmentA summary of the activities performed during each phase of the incident response activityA list of topics that should be added to the organization’s security awareness training program based on weaknesses exploited during the attack

Questions & review

CorrectIncorrectUnanswered

Question link

About this exam

CompTIA Security + SY0-501 exam practice questions for the CompTIA Security + SY0-501 exam for international qualifications that assess the performance of the fastest-growing security technicians in the IT industry.