In the context of incident handling phases, which two activities fall under scoping? (Choose two.)
A . determining the number of attackers that are associated with a security incident
B . ascertaining the number and types of vulnerabilities on your network
C . identifying the extent that a security incident is impacting protected resources on the network
D . determining what and how much data may have been affected
E . identifying the attackers that are associated with a security incident
Answer: CD