Which principle is being followed when an analyst gathers information relevant to a security incident to determine the appropriate course of action?

Which principle is being followed when an analyst gathers information relevant to a security incident to determine the appropriate course of action?
A . decision making
B . rapid response
C . data mining
D . due diligence

View Answer

Answer: A

Explanation:

Decision making is a principle that guides an analyst to gather information relevant to a security incident to determine the appropriate course of action. Decision making involves identifying the problem, defining the criteria, analyzing the alternatives, and choosing the best solution. Decision making helps an analyst to respond to an incident effectively and efficiently, while minimizing the impact and risk to the organization.

Reference: https://learningnetworkstore.cisco.com/on-demand-e-learning/understanding-cisco-cybersecurity-operations-fundamentals-cbrops-v1.0/CSCU-LP-CBROPS-V1-028093.html (Module 3: Security Monitoring, Lesson 3.1: Security Operations Center)