In which phase of the NIST incident response life cycle is evidence gathered that can assist subsequent investigations by authorities?

IT Exam Items Repository › Category: CCNA CyberOps › In which phase of the NIST incident response life cycle is evidence gathered that can assist subsequent investigations by authorities?

In which phase of the NIST incident response life cycle is evidence gathered that can assist subsequent investigations by authorities?

postincident activities
detection and analysis
preparation
containment, eradication, and recovery

Explanation: NIST defines four phases in the incident response process life cycle. It is in the containment, eradication, and recovery phase that evidence is gathered to resolve an incident and to help with subsequent investigations.

In which phase of the NIST incident response life cycle is evidence gathered that can assist subsequent investigations by authorities?

About The Author

ITExam Editorial Team