Why is it important for an Incident Responder to analyze an incident during the Recovery phase?
A . To determine the best plan of action for cleaning up the infection
B . To isolate infected computers on the network and remediate the threat
C . To gather threat artifacts and review the malicious code in a sandbox environment
D . To access the current security plan, adjust where needed, and provide reference materials in the event of a similar incident
Answer: D