CompTIA CySA+ Cybersecurity Analyst Certification Passport (Exam CS0-002)

Incident Response

Domain Objectives

• 4.1  Explain the importance of the incident response process.

• 4.2  Given a scenario, apply the appropriate incident response procedure.

• 4.3  Given an incident, analyze potential indicators of compromise.

• 4.4  Given a scenario, utilize basic digital forensics techniques.

Objective 4.1  Explain the importance of the incident response process

Incident response (IR) is one area you must get right the first time. If an incident (a negative event) were to happen in your organization, you don’t get a second ...