What should be included in a cloud security incident response plan?

Question

Accepted Answer

Procedures for identifying, containing, eradicating, and recovering from security incidents

Answer

Only the backup and restore procedures for the affected systems, with no playbook for detection, containment, or eradication

Answer

Only the contact information for the IT staff who are on call during business hours, with no detection or recovery playbook

Answer

Only the configuration of the monitoring tools that produce the alerts, with no playbook for handling the resulting incidents

AZ-900 Question 37