PBQ — Incident Response Procedure

PBQ

Incident Response — Order Steps & Classify Actions

SY0-701 Obj 4.2 · Incident Response Process

Part 1: A ransomware attack has been detected on the corporate network. Drag the six IR phases into the correct order (top = first).

Part 2: For each action taken during the incident, classify which IR phase it belongs to.

Part 1 — Drag phases into correct order (1 = first)

🗃️ IR Phases — drag to order

✅ Correct Order (1 = first action)

Part 2 — Classify each action into its IR phase

All PBQ Labs