According to the scenario, which of the following stages of incident handling and response (IH&R) process did Robert perform?

Robert is an incident handler working for X security Inc. One day, his organization faced a massive cyberattack and all of the websites related to the organization went offline. Robert was on duty during the incident and he was responsible for handling the incident and maintaining business continuity. He immediately restored the web application service with the help of the existing backups.

According to the scenario, which of the following stages of incident handling and response (IH&R) process did Robert perform?
A . Evidence gathering and forensics analysis
B . Eradication
C . Not if cation
D . Recovery

Answer: D