Reporting & Communication
48 practice questions with explanations — 15 free to try
4 of these 48 questions are in the free 15-question taster · the full topic is part of Premium
PassNova has 48 CompTIA CySA+ practice questions on Reporting & Communication, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Reporting & Communication: example questions & answers
4 worked examples with answers and explanations below. Try 15 CompTIA CySA+ questions free in the browser; the full 48-question Reporting & Communication bank is part of PassNova Premium.
A security team measures the average time from when an incident first occurs to when it is detected. Which metric are they tracking?
- AAnnual rate of occurrence
- BRecovery point objective (RPO)
- CMaximum tolerable downtime (MTD)
- DMean time to detect (MTTD)✓
Answer: Mean time to detect (MTTD) measures how long it takes to discover an incident after it begins, a key performance metric for security operations reporting.
After an incident, the team identifies the underlying flaw that allowed it to happen and recommends preventing recurrence. This part of the report is the:
- AExecutive bonus summary
- BMarketing impact statement
- CVendor renewal schedule
- DRoot cause analysis✓
Answer: Root cause analysis identifies the fundamental reason an incident occurred so that corrective actions can prevent it from happening again.
An analyst must report a confirmed breach to law enforcement, regulators, and affected customers. Maintaining a predefined list of who must be informed and how is part of which plan?
- ANetwork addressing scheme
- BCommunication (stakeholder notification) plan✓
- CCapacity planning document
- DSoftware licensing register
Answer: A communication plan defines stakeholders, escalation paths, and notification methods so the right parties are informed correctly during an incident.
When two organisations agree to share threat intelligence, a colour-coded scheme is often used to indicate how widely each piece of information may be redistributed. Which scheme is this?
- ARAID array levels describing disk redundancy schemes
- BThe CIA triad
- CTraffic Light Protocol (TLP)✓
- DOSI seven-layer model used to describe network functions
Answer: The Traffic Light Protocol (TLP) uses colour labels such as RED, AMBER, GREEN, and CLEAR to govern how shared information may be disseminated.