Root Cause Analysis Quiz

What you'll be asked

1. What is the primary goal of a Root Cause Analysis (RCA) session after a security incident?
2. During a post-incident review, you are using the '5 Whys' technique. What is the main purpose of repeatedly asking 'Why'?
3. Which of the following describes the 'Fishbone' (Ishikawa) diagram in the context of Root Cause Analysis?
4. After a server was compromised due to an unpatched vulnerability, the team concludes that the root cause was 'the IT team forgot to patch the server.' Why might this be an incomplete RCA?
5. When conducting a Root Cause Analysis for a complex incident involving multiple departments, which action is most critical to ensuring a 'blameless' culture?

Answers and explanations come after you submit.