Câu 150: CS0-003: CompTIA CySA+ (CS0-003)

An incident response analyst is taking over an investigation from another analyst. The investigation has been going on for the past few days. Which of the following steps is most important during the transition between the two analysts?

1. A. Identify and discuss the lessons learned with the prior analyst.
2. B. Accept all findings and continue to investigate the next item target.
3. C. Review the steps that the previous analyst followed. — đáp án hiện tại
4. D. Validate the root cause from the prior analyst.