CompTIA Security+ SY0-701 Practice Question
During a security incident, after initial detection and analysis, an IT security analyst is determining which course of action to take to limit the damage and prevent extended downtime. Out of the following options, which should be prioritized?
Containment
Lessons learned
Recovery
Eradication