Which two elements are part of the eradication phase for this incident?

A security team detected an above-average amount of inbound tcp/135 connection attempts from unidentified senders. The security team is responding based on their incident response playbook.

Which two elements are part of the eradication phase for this incident? (Choose two.)
A . anti-malware software
B . data and workload isolation
C . centralized user management
D . intrusion prevention system
E . enterprise block listing solution

View Answer

Answer: CD