Home  >  CompTIA Security+  >  SY0-501 CompTIA Security+ Certification Exam

A. incident response manager has started to gather all the facts related to a SIEM alert showing multiple systems may have been compromised. The manager has gathered these facts: The breach is currently indicated on six user PCs One service account is potentially compromised Executive management has been notified In which of the following phases of the IRP is the manager currently working?

🎲 Try a Random Question  |  Total Questions in Quiz: 201  |  🧠 Study this quiz with Flashcards
This question is part of a full practice quiz:
SY0-501 CompTIA Security+ Certification Exam — practice the complete quiz, review flashcards, or try a random question.
🧠 Flashcards (fast review) 🧪 Practice Quiz ⚔️ Challenge a Friend 🥊 📊 View Stats

A. incident response manager has started to gather all the facts related to a SIEM alert showing multiple systems may have been compromised. The manager has gathered these facts: The breach is currently indicated on six user PCs One service account is potentially compromised Executive management has been notified In which of the following phases of the IRP is the manager currently working?






 
❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

🌈  Our mission is to help improve your scores in any subject and exam withonline quizzes, practice tests, study guides, & advice for students. Since 2018.
About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | What Should We Know?
Privacy | Terms |
Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.