What should be the INITIAL response to Intrusion Detection System/Intrusion Prevention System (IDS/IPS) alerts?

exams CISSP CISSP exam 0 Comments

What should be the INITIAL response to Intrusion Detection System/Intrusion Prevention System (IDS/IPS) alerts?
A . Ensure that the Incident Response Plan is available and current.
B . Determine the traffic’s initial source and block the appropriate port.
C . Disable or disconnect suspected target and source systems.
D . Verify the threat and determine the scope of the attack.

Answer: D