After acknowledging the alarm, what three options does the operator have?

• A. Monitor, access, or log
• B. Secure, access or tag
• C. Acknowledge again, escalate, ignore
• D. Silence, defer, tag

Answer: (B)

After acknowledging the alarm, the operator moves into actions that actively manage the situation: secure the area, gain the necessary access to investigate, and tag the event to mark its status. Securing the area means putting controls in place to protect people and assets—think locking doors, tightening perimeters, and ensuring unauthorised entry is prevented. Gaining access involves reaching into the affected area or systems so you can inspect the sensors, verify what triggered the alarm, and perform any required checks or resets. Tagging the event is about recording its status for follow-up—labeling it as under investigation, a confirmed issue, or a false alarm so the incident is tracked and reports can be generated.

These steps cover containment, verification, and documentation, which are the practical actions after an alarm is acknowledged. Other options try to pair different actions that aren’t the standard trio for this moment—continuing to monitor or logging might happen later, but they aren’t the immediate three actions described here; acknowledging again, escalating, or ignoring isn’t aligned with the proper response flow; and silencing or deferring without securing and tagging misses the essential steps of containment and tracking.