After further investigation, the analyst learns that customers claim that they cannot access company servers According to NIST SP800-61, in which phase of the incident response process is the analyst?

A security analyst notices a sudden surge of incoming traffic and detects unknown packets from unknown senders.

After further investigation, the analyst learns that customers claim that they cannot access company servers According to NIST SP800-61, in which phase of the incident response process is the analyst?
A . post-incident activity
B. detection and analysis
C. preparation
D. containment, eradication, and recovery

View Answer

Answer: B