Practice · Cybersecurity Apprentice

~/paloalto-pcca · paloalto-pcca_d1_e39954d52147 ▊

← Cybersecurity Apprentice · practice sheet

paloalto-pcca_d1_e39954d52147 domain/d1 · medium single

A newly assigned analyst is told that when an incident arrives, one person 'catches' it much like a detective catches a homicide case. According to the CISO, why is this end-to-end ownership model, combined with a war room, so important?

A It ensures clear communication and a single owner who runs the incident from end to end
B It allows multiple teams to independently investigate without needing to coordinate
C It removes the need for playbooks since the owner improvises each response
D It shifts accountability to executives so analysts can focus on other work

Unlock this exam to join the per-question discussion and vote on questions.

next question →