Which two actions should be taken during the preparation phase of the incident response life cycle defined by NIST? (Choose two.)

Which two actions should be taken during the preparation phase of the incident response life cycle defined by NIST? (Choose two.)

• Fully analyze the incident.
• Meet with all involved parties to discuss the incident that took place.
• Detect all the incidents that occurred.
• Acquire and deploy the tools that are needed to investigate incidents.
• Create and train the CSIRT

Explanation: According to the guideline defined in the NIST Incident Response Life Cycle, several actions should be taken during the preparation phase including (1) creating and training the CSIRT and (2) acquiring and deploying the tools needed by the team to investigate incidents.

Exam with this question: CCNA SECOPS 210-255 Dumps – Certification Practice Exam Answers
Exam with this question: CyberOps Associate (Version 1.0) - CyberOps Associate (200-201) Certification Practice Exam
Exam with this question: CyberOps Associate Final Exam Answers