CompTIA Security Plus Mock Test Q1319

Which of the following steps in incident response procedures entails of the incident and identification of knowledge gained that can be applied to future handling of incidents?

A. Recovery procedures
B. Escalation and notification
C. Reporting
D. Lessons learned

Correct Answer: D
Section: Mixed Questions