Test your knowledge: Incident management foundations — Question 1

A cybersecurity analyst detects a malicious cryptocurrency miner installed in one of their company's systems. Using the National Institute of Standards and Technology (NIST) incident response lifecycle, they confirm the incident. What are the next two phases of the NIST lifecycle after confirming the miner's presence? Select two answers.