Based on the IRP, what should be done immediately?

Your firewall blocked several machines on your network from connecting to a malicious IP address. After reviewing the logs, the CSIRT discovers all Microsoft Windows machines on the network have been affected based on a newly published CVE.

Based on the IRP, what should be done immediately?
A . Update the asset inventory
B . Contain the breach
C . Eradicate the breach
D . Revise the IRP

View Answer

Answer: A