NIST CSF Practice Question: Why is documentation important during incident response? | CyberCertPrep
NISTNIST CSFRespond FunctionEASYFree question
Why is documentation important during incident response?
A.It is optional and only needed for major incidents
B.It is only required for regulatory compliance
C.It slows down the response process intentionally
D.It provides a record for analysis, legal proceedings, and future improvements
Why D is correct
Documentation during incident response provides an essential record for forensic analysis, potential legal proceedings, regulatory compliance, and incorporating lessons learned into future improvements.
Know someone studying for NIST CSF? Send them this one.
CyberCertPrep gives you 20 free NIST CSF questions per day with this same answer-and-explanation depth, plus timed exam simulations and progress tracking. No card required.
NIST CSF and NIST are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by NIST or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.
What is the primary goal of the NIST CSF Respond function?