Fill in the blank: During the __________ phase, security teams may conduct a full-scale analysis to determine the root cause of an incident and use what they learn to improve the company's overall security posture.
A. eradication and recovery
B. post-incident activity
C. containment
D. detection and analysis
Answer (2)
The chosen option is B. post-incident activity . This phase involves security teams analyzing incidents to determine root causes and implementing changes to improve future security measures. It strengthens the overall security posture of the organization.
;
The post-incident activity phase is where security teams analyze incidents to determine root causes and improve security. This involves root cause analysis, documentation, and implementing changes. Successful completion of this phase strengthens the company's overall security posture. ;
