Fill in the blank: During the _____ phase, security professionals use tools and strategies to determine whether a breach has occurred and to evaluate its potential magnitude.1 pointcontainmentcoordinationdetection and analysispreparation

Fill in the blank: During the _____ phase, security teams may conduct a full-scale analysis to determine the root cause of an incident and use what they learn to improve the company’s overall security posture.1 pointeradication and recoverydetection and analysispost-incident activitycontainment

A security breach has happened at a major corporation. The incident team has responded and executed their incident response plan. During which phase are lessons learned applied?Select one:analyzecontainmentrecoverypreparationpost-incidentdetection

Fill in the blank: Once a security incident is resolved, security analysts perform various post-incident activities and _____ efforts with the security team. 1 pointcoordinationeradicationpreparationdetection

A security analyst documents procedures to be followed in the event of a security breach. They also establish staffing plans and educate employees. What phase of an incident response playbook does this scenario describe? 1 pointPreparationEradication and recoveryDetection and analysisCoordination

What metrics should you track to evaluate your data breach prevention and response strategy?