After a phishing attack that compromised several user accounts, the investigation reveals that the attack succeeded because the email gateway's spam filter was misconfigured, allowing the phishing emails to reach users. The accounts have been secured and the emails removed. What is the MOST important next step to prevent a recurrence?

Block the sender's email address and domain.

Reset all user passwords and enforce multi-factor authentication.

Increase the frequency of user security awareness training.

Conduct a root cause analysis to identify why the spam filter was misconfigured.

CompTIASecurity+

Domain 4Objective 8

Incident Response SY0-701 Practice Questions (Page 6)

Part of the Security operations domain, which accounts for 28% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

28%of the exam

Questions 26–26

26application · medium
After a phishing attack that compromised several user accounts, the investigation reveals that the attack succeeded because the email gateway's spam filter was misconfigured, allowing the phishing emails to reach users. The accounts have been secured and the emails removed. What is the MOST important next step to prevent a recurrence?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Incident Response SY0-701 Practice Questions (Page 6)

Questions 26–26

Keep studying — Security operations