Câu 10: GICSP: Global Industrial Cyber Security Professional

Which of the following is typically performed during the Recovery phase of incident response?

1. A. Updating the organization's security policies to prevent future breaches.
2. B. Patching and configuring systems to meet established secure configuration standards. — đáp án hiện tại
3. C. Finding the root cause or vector used by the attacker to gain entry and maintain access.
4. D. Making a forensic image of the system(s) involved in the incident.