👑 VIP Practice Test

CAP Incident Response & Recovery 5 is part of the expanded VIP practice test library — only for VIP members.

Question 1👑 VIP

Under NIST SP 800-61, what is the recommended first action when an incident is confirmed during the Detection and Analysis phase?

Remaining questions and full explanations are VIP-exclusive.

Already a VIP member? Enter your email to unlock instantly: