Câu 20: 312-39V2: Certified SOC Analyst (CSA) v2

The SOC team at GlobalTech has just finished patching a critical vulnerability exploited during a ransomware attack. The team is now restoring 2.3TB of encrypted data from their Veeam backup system, rebuilding 23 compromised workstations identified through SIEM logs and re-enabling network access for the finance department after validating the systems are clean. Which of the following Incident Response phase is this?

1. A. Post-incident Activities
2. B. Containment
3. C. Eradication
4. D. Recovery — đáp án hiện tại