CompTIACompTIA
SY0-701 · Question #824
SY0-701 Question #824: Real Exam Question with Answer & Explanation
Sign in or unlock SY0-701 to reveal the answer and full explanation for question #824. The question stem and answer options stay visible for context.
Submitted by zhang_li· Mar 6, 2026Security Operations
Question
Which of the following are activities that should be completed during the containment and eradication phases of the incident response process? (Choose two.)
Options
- ANotifying stakeholders
- BRestoring the system
- CIdentifying the threat
- DRemoving the malicious threat
- EDeveloping a recovery plan
- FAnalyzing the incident
Unlock SY0-701 to see the answer
You've previewed enough free SY0-701 questions. Unlock SY0-701 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.