CompTIA
SY0-701 · Question #446
While investigating a possible incident, a security analyst discovers the following log entries: Which of the following should the analyst do first?
Sign in or unlock SY0-701 to reveal the answer and full explanation for question #446. The question stem and answer options stay visible for context.
Submitted by miguelv· Mar 6, 2026Security Operations
Question
While investigating a possible incident, a security analyst discovers the following log entries:
Which of the following should the analyst do first?
Exhibit
Options
- AImplement a WAF
- BDisable the query .php script
- CBlock brute-force attempts on temporary users
- DCheck the users table for new accounts
Unlock SY0-701 to see the answer
You've previewed enough free SY0-701 questions. Unlock SY0-701 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.