Verified Q&A Bank

Free Practice Question #16325

In a hybrid cloud involving the remote-access VPN and admin credentials, After restoring services, the team reviews root cause and updates playbooks. Which IR activity is this?

+1-0
MCQ
A
Initial exploitation
B
Lessons learned
C
Asset disposal
D
Privilege escalation
CompTIA-SecurityPlusSY0-701practice-test-04domain-4-security-operations4.8-incident-responselessons-learneddifficulty-1

Want to try a full mock exam?

Unlock the full timed mock test series for CompTIA-SecurityPlus to see detailed analytics and compete on the leaderboard.

Start Full Test Series