Câu 9: 350-201: Performing CyberOps Using Core Security Technologies (CBRCOR)

The incident response team was notified of detected malware. The team identified the infected hosts, removed the malware, restored the functionality and data of infected systems, and planned a company meeting to improve the incident handling capability. Which step was missed according to the NIST incident handling guide?

1. A. Contain the malware
2. B. Install IPS software
3. C. Determine the escalation path
4. D. Perform vulnerability assessment — đáp án hiện tại