Why is it important for an Incident Responder to analyze an incident during the Recovery phase?

Why is it important for an Incident Responder to analyze an incident during the Recovery phase?
A . To determine the best plan of action for cleaning up the infection
B . To isolate infected computers on the network and remediate the threat
C . To gather threat artifacts and review the malicious code in a sandbox environment
D . To access the current security plan, adjust where needed, and provide reference materials in the event of a similar incident

View Answer

Answer: D