Which of the following actions would be recommended to improve an incident response process?

exams SY0-601 V4 SY0-601 exam 0 Comments

Which of the following actions would be recommended to improve an incident response process?
A . Train the team to identify the difference between events and incidents
B. Modify access so the IT team has full access to the compromised assets
C. Contact the authorities if a cybercrime is suspected
D. Restrict communication surrounding the response to the IT team

Answer: A