PrepAway - Latest Free Exam Questions & Answers

When should a post-mortem review meeting be held after …

When should a post-mortem review meeting be held after an intrusion has been properly taken care of?

PrepAway - Latest Free Exam Questions & Answers

A.
Within the first three months after the investigation of the intrusion is completed.

B.
Within the first week after prosecution of intruders have taken place, whether successful or not.

C.
Within the first month after the investigation of the intrusion is completed.

D.
Within the first week of completing the investigation of the intrusion.

Explanation:
You should make post mortem review meeting after taking care of the intrusion, and no more than one week
after the intrusion has been taken care of.
Incorrect Answers:
A: It is not a good practice to wait more than one week for the post-mortem review meeting. Three months is
too much time.
B: It is not a good practice to wait more than one week for the post-mortem review meeting To wait for until
after a prosecution would take too much time.
C: It is not a good practice to wait more than one week for the post-mortem review meeting. One month is too
much time.

Conrad, Eric, Seth Misenar and Joshua Feldman, CISSP Study Guide, 2nd Edition, Syngress, Waltham, 2012,
p. 332


Leave a Reply