An incident response team requires documentation for an email phishing campaign against a company's email server. Which of the following is the BEST resource to use to start the investigation?
A) Audit and system logs
B) Change management procedures
C) Departmental policies
D) Standard operating procedures

Question

Quizplus · Accepted Answer

Audit and system logs provide detailed records of email server activities, which are crucial for investigating a phishing campaign.

An Incident Response Team Requires Documentation for an Email Phishing