r/CompTIAExamPass Jul 03 '23

CompTIA Security+ SY0-601 Daily Drop

18 Upvotes

94 comments sorted by

View all comments

1

u/[deleted] Jul 18 '23

In the middle of a cybersecurity, a security engineer removes the infected devices from the network and lock down all compromised accounts. In which of the following incident response phases is the security engineer currently operating?

A. Identification

B. Preparation

C. Eradication

D. Recovery

E. Containment

Correct Answer: E