Câu 41: 312-39V2: Certified SOC Analyst (CSA) v2

James Rodriguez has recently taken over as the lead SOC manager at GlobalTech Dynamics, a Fortune 500 company with a growing cyber threat landscape. She is tasked with strengthening the SOC’s capabilities to protect the organization's critical assets. Her team is currently deploying a $2M state-of-the-art SOC facility, creating detailed incident response playbooks, running tabletop exercises to simulate real-world attacks, and training a 15-member incident response team to handle alerts and incidents efficiently. In the context of the Incident Response Process Flow, which phase best aligns with these activities?

1. A. Recovery
2. B. Incident Triage
3. C. Incident Recording and Assignment
4. D. Preparation — đáp án hiện tại