What is root cause analysis in the context of incident response, and how do you determine the initial attack vector after containing an incident?

Sample answer preview

Root cause analysis in incident response is the process of working backward from the observed impact to identify the fundamental vulnerability, misconfiguration, or action that allowed the attacker to gain initial access.