In handling computer-related incidents, which IT role is typically responsible for recovery, containment, and prevention to constituents?

• A. Security Administrator
• B. Network Administrator
• C. Director of Information Technology
• D. Director of Administration

Answer: (B)

When an incident affects how users access computer resources, the person best positioned to act quickly is the one who controls and maintains the network itself. The network administrator has the hands-on ability to contain the issue by isolating affected segments, stop the spread of any disruption, and restore network services so that users can resume work. They also implement preventive steps—like updating configurations, tightening access controls, and improving monitoring—to reduce the chance of recurrence.

The security administrator focuses more on policies, access controls, and threat monitoring, not the day-to-day restoration of services. Directors provide leadership and strategic direction rather than performing the operational steps required to recover and prevent similar incidents.