An Engineer Discovered a Breach, Identified the Threat's Entry Point

question 131

Multiple Choice

An engineer discovered a breach, identified the threat's entry point, and removed access. The engineer was able to identify the host, the IP address of the threat actor, and the application the threat actor targeted. What is the next step the engineer should take according to the NIST SP 800-61 Incident handling guide?

• A) Recover from the threat.
• B) Analyze the threat.
• C) Identify lessons learned from the threat.
• D) Reduce the probability of similar threats.

---

Definitions:

Superior Performance

Achieving results that surpass expected standards or benchmarks, often leading to competitive advantage.

Best Practices

Best practices are the methods or techniques that have been generally accepted as superior to alternatives because they produce results that are superior to those achieved by other means.

Benchmarking

The practice of comparing business processes and performance metrics to industry bests or best practices from other companies.

Incorporate Ideas

The process of taking suggestions, concepts, or viewpoints and integrating them into a project or plan.