After an incident, but before returning to its normal duties, the CSIRT must do which of the following?

A. Create the incident damage assessment.
B. Conduct an after-action review.
C. Restore data from backups.
D. Restore services and processes in use.


Answer: B

Computer Science & Information Technology

You might also like to view...

Polymorphism enables you to:

a. program in the general. b. program in the specific. c. absorb attributes and behavior from previous classes. d. hide information from the user.

Computer Science & Information Technology

IMAP users can't work with email while offline.

Answer the following statement true (T) or false (F)

Computer Science & Information Technology

___________ locks a device and then requests payment for an unlocking code.

Fill in the blank(s) with the appropriate word(s).

Computer Science & Information Technology

____ types store various kinds of numbers, and can be used as "building blocks" to build other types.

A. Reference B. Primitive C. Return D. General

Computer Science & Information Technology