CompTIA
SY0-701 · Question #522
Which of the following activities is included in the post-incident review phase?
Sign in or unlock SY0-701 to reveal the answer and full explanation for question #522. The question stem and answer options stay visible for context.
Submitted by deeparc· Mar 6, 2026Security operations
Question
Which of the following activities is included in the post-incident review phase?
Options
- ADetermining the root cause of the incident
- BDeveloping steps to mitigate the risks of the incident
- CValidating the accuracy of the evidence collected during the investigation
- DReestablishing the compromised system's configuration and settings
Unlock SY0-701 to see the answer
You've previewed enough free SY0-701 questions. Unlock SY0-701 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Incident response#Post-incident review#Root cause analysis#Incident management