Cisco CBRFIR (300-215) Practice Questions - Cisco CyberOps Professional - Conducting Forensic Analysis And Incident Response Using Cisco Technologies (300-215 CBRFIR) V1.2 Exam

Identifying the initial attack vector and isolating affected systems Restoring systems to normal operation and confirming eradication Conducting a lessons-learned meeting and updating the IR plan Activating the incident response team and declaring a severity level