A security analyst is running a vulnerability scan to check for missing patches during a suspected security incident. During which of the following phases of the response process is this activity MOST likely occurring?
A) Containment
B) Identification
C) Recovery
D) Preparation

Question

Quizplus · Accepted Answer

The vulnerability scan to check for missing patches is part of the Identification phase, where the goal is to identify and confirm the nature of the security incident.

A Security Analyst Is Running a Vulnerability Scan to Check