Câu 116: SY0-601: CompTIA Security+ 2021

An organization has hired a red team to simulate attacks on its security posture. Which of the following will the blue team do after detecting an IoC?

1. A. Reimage the impacted workstations.
2. B. Activate runbooks for incident response. — đáp án hiện tại
3. C. Conduct forensics on the compromised system.
4. D. Conduct passive reconnaissance to gather information.