CompTIA
SK0-003 · Question #632
SK0-003 Question #632: Real Exam Question with Answer & Explanation
Sign in or unlock SK0-003 to reveal the answer and full explanation for question #632. The question stem and answer options stay visible for context.
Question
An administrator is investigating an incident where an unauthorized user gained access to a server and modified HR files. The administrator has a tested theory as to how the user accomplished this. Which of the following actions should the administrator take NEXT?
Options
- APerform a root cause analysis.
- BImplement a change to the servers.
- CEstablish a plan of action to resolve the issue.
- DQuestion users prior to implementing the solution.
Unlock SK0-003 to see the answer
You've previewed enough free SK0-003 questions. Unlock SK0-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.