Hello, I just came across this question from the CompTIA Cybersecurity Analyst (CySA+) 20 Practice Exam questions on Lets Defend.
Question 10:
“What is the first step in the incident response process?”
why the “Preperation” is not the correct answer and “Identification”
is the correct answer.
Below is the link for the practice exam:
CompTIA Cybersecurity Analyst (CySA+) Practice Exam