Which of the following should the incident response team perform to understand the crash and prevent it in the future?

The OS on several servers crashed around the same time for an unknown reason. The servers were restored to working condition, and all file integrity was verified .

Which of the following should the incident response team perform to understand the crash and prevent it in the future?
A . Root cause analysis
B . Continuity of operations plan
C . After-action report
D . Lessons learned

View Answer

Answer: A