Câu 4: 312-39V2: Certified SOC Analyst (CSA) v2

At 10:30 AM, during routine monitoring, SOC’s Tier-1 Jennifer detects unusual network traffic and confirms an active LockBit ransomware infection targeting systems in the finance department. She escalates the issue to the SOC lead, Sarah, who activates the Incident Response Team (IRT) and instructs the network team to isolate the finance department’s VLAN to prevent further spread across the network. Which phase of the Incident Response process is currently being implemented?

1. A. Notification
2. B. Evidence Gathering and Forensic Analysis
3. C. Eradication
4. D. Containment — đáp án hiện tại