Q13
Multiple choice
A security team received reports of users receiving emails linked to external or unknown URLs that are non-returnable and non-deliverable. The ISP also reported a 500% increase in the amount of ingress and egress email traffic received. After detecting the problem, the security team moves to the recovery phase in their incident response plan.
Which two actions should be taken in the recovery phase of this incident? (Choose two.)
Select all that apply.