CompTIA Security+ (SY0-701) — Question 343

Which of the following activities is the first stage in the incident response process?

Answer options

• A. Detection
• B. Declaration
• C. Containment
• D. Verification

Correct answer: A

Explanation

The correct answer is A, Detection, as it involves identifying whether an incident has occurred. Declaration, Containment, and Verification are subsequent steps in the incident response process that follow the detection phase.