CompTIA Security+ 701 Practice: Incident Response Step 1

Domain 4: Operations and Incident Response.

Question 8. What is the first step in the incident response process?

Answer: B) Identification.

Explanation:
Identification involves detecting and determining the scope of a security incident. Without identifying the issue, further steps like containment or eradication cannot occur.

Example: An IT team notices unusual login attempts and identifies it as part of a brute-force attack.


Please Like, Share and Subscribe for more Practice Questions.

#cybersecurity #comptia #comptiasecurity #encryption #exam #itcertifications #networksecurity #riskmanagement #securityexam #security