Question 384:
Following the successful response to a data-leakage incident, the incident team lead facilitates an exercise that focuses on continuous improvement of the organization`s incident response capabilities. Which of the following activities has the incident team lead executed?
Answer options:
A. Lessons learned review B. Root cause analysis C. Incident audit D. Corrective action exercise