ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 156 - SY0-601 discussion

Report
Export

Which of the following incident response steps occurs before containment?

A.
Eradication
Answers
A.
Eradication
B.
Recovery
Answers
B.
Recovery
C.
Lessons learned
Answers
C.
Lessons learned
D.
Identification
Answers
D.
Identification
Suggested answer: D

Explanation:

Identification is the first step in the incident response process, which involves recognizing that an incident has occurred. Containment is the second step, followed by eradication, recovery, and lessons learned.

Reference: CompTIA Security+ Study Guide, Exam SY0-601, 4th Edition, Chapter 10: Incident Response and Recovery, pp. 437-441.

asked 02/10/2024
Liusel Herrera Garcia
27 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first