The FIRST priority when responding to a major security incident is:
A . documentation.
B . monitoring.
C . restoration.
D . containment.
Answer: D
Explanation:
The first priority in responding to a security incident is to contain it to limit the impact. Documentation, monitoring and restoration are all important, but they should follow containment.