What steps should a junior analyst take when following an incident response plan template during a simulated breach?