What is the first action for the incident response team?

A malware outbreak is detected by the SIEM and is confirmed as a true positive. The incident response team follows the playbook to mitigate the threat.

What is the first action for the incident response team?
A . Assess the network for unexpected behavior
B . Isolate critical hosts from the network
C . Patch detected vulnerabilities from critical hosts
D . Perform analysis based on the established risk factors

View Answer

Answer: B