Turn investigations into control improvements, root-cause fixes, and response maturity.
4
Questions
80%
Pass score
+220
XP
21m 0s
Time
Which question matters most in a good post-incident review?
Closing an incident without identifying follow-up owners weakens long-term resilience.
What analysis method asks repeatedly why an issue happened until a deeper cause is found?
Write the defensive concept or action clearly. Administrators can configure multiple accepted answer variants.
An attacker reused a disabled control path that was noted in a previous incident review. What failed organizationally?
Write the defensive concept or action clearly. Administrators can configure multiple accepted answer variants.