300-215 Question 34
Single answerDuring an incident response investigation, which role is primarily responsible for managing communication between the incident response team and external stakeholders, such as legal teams or public relations?
- A
Incident Commander
- B
Forensic Analyst
- C
Communication Liaison
- D
Threat Hunter
Show answer and explanation
Correct answer: C
Explanation
In an incident response process, the Communication Liaison plays a critical role by ensuring clear and accurate communication between the incident response team and external stakeholders. This role helps maintain transparency, ensures compliance with regulatory requirements, and manages the organization's reputation during a cybersecurity incident.
- A. Incorrect.
The Incident Commander is primarily responsible for overseeing the entire response process, coordinating team activities, and making critical decisions, but not specifically managing external communications.
- B. Incorrect.
The Forensic Analyst focuses on gathering and analyzing evidence related to the incident, not on handling external communication.
- C. Correct.
The Communication Liaison is responsible for managing communication between internal teams and external stakeholders, such as legal, public relations, and regulatory authorities, which aligns with the question.
- D. Incorrect.
The Threat Hunter specializes in proactively searching for potential threats in an organization's environment and is not involved in external communication during an incident response.