FEDVTE ROOT CAUSE ANALYSIS
EXAM 2025 QUESTIONS AND
ANSWERS
Who typically performs root cause analysis? - ....ANSWER ...-CSIRT incident
analysts
When during the incident response process is root cause analysis most commonly
performed? - ....ANSWER ...-During detailed incident analysis
What preparations best enable root cause analysis? - ....ANSWER ...-Having
defined threat vectors and access to data sources that confirm or refute those threat
vectors
The cyber kill chain model would be least useful for an incident involving which of the
following threat vectors? - ....ANSWER ...-Insider attack
Which of the following might be an example of an incident with no attacker? -
....ANSWER ...-Lost equipment
What is a cyber kill chain? - ....ANSWER ...-A systematic process to target and
engage an adversary to create desired effects
What is root cause analysis? - ....ANSWER ...-A method for understanding the
problems that allowed an attack to occur
...©️ 2025, ALL RIGHTS RESERVED 1
EXAM 2025 QUESTIONS AND
ANSWERS
Who typically performs root cause analysis? - ....ANSWER ...-CSIRT incident
analysts
When during the incident response process is root cause analysis most commonly
performed? - ....ANSWER ...-During detailed incident analysis
What preparations best enable root cause analysis? - ....ANSWER ...-Having
defined threat vectors and access to data sources that confirm or refute those threat
vectors
The cyber kill chain model would be least useful for an incident involving which of the
following threat vectors? - ....ANSWER ...-Insider attack
Which of the following might be an example of an incident with no attacker? -
....ANSWER ...-Lost equipment
What is a cyber kill chain? - ....ANSWER ...-A systematic process to target and
engage an adversary to create desired effects
What is root cause analysis? - ....ANSWER ...-A method for understanding the
problems that allowed an attack to occur
...©️ 2025, ALL RIGHTS RESERVED 1