Given an incident, apply appropriate incident response activities.
5 practice questions under this official exam objective (SY0-701), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
5 total · page 1 of 1PKI Cleanup: Update CRL vs Patch the CA
In a penetration test that abused internal PKI to reach domain administrator rights, the cleanup-phase answer is to update the CRL and revoke the craf
Keylogger Found in User File: First SOC Action?
This SY0-701 scenario shows a keylogger capture containing a Gmail address and a cleartext password; the first action should be to reimage the infecte
Which Logs Identify a Host Impacted by a Command-and-Control Server?
Analyzing network and firewall logs is the correct approach to identify a host communicating with a command-and-control server in Security+ SY0-701 sc
Why Should Root Cause Analysis Be Part of Incident Response?
Root cause analysis during incident response exists to find the underlying weakness that allowed an incident to occur so the same failure can be preve
What should an analyst do first after discovering a SQL injection in query.php?
When an analyst finds a SQL injection attempt in query.php logs, the correct first step in SY0-701 incident response is to check the users table for n