Refer to the Exhibit

question 122

Multiple Choice

Refer to the exhibit. Symantec Data Loss Prevention's four phases of risk reduction model provides a blueprint for identifying and remediating key risk areas without disrupting legitimate business activity. According to this model, which activity should occur during the baseline phase?

• A) monitor incidents and tune the policy to reduce false positives
• B) define and build the incident response team
• C) establish business metrics and begin sending reports to business unit stakeholders
• D) test policies to ensure that blocking actions minimize business process disruptions

---

Definitions:

Conditioned Response

A learned reaction to a previously neutral stimulus that has become associated with an unconditioned stimulus after conditioning.

Conditioned Stimulus

An initially neutral trigger that, following its association with an unconditioned stimulus, ultimately elicits a conditioned reaction.

Unconditioned Stimulus

In behavioral psychology, an automatically triggering stimulus that leads to a natural response without the need for prior learning.

Spontaneous Recovery

A phenomenon in learning where a previously extinguished response re-emerges after a pause in exposure to the conditioning stimulus.