What should be the INITIAL response to Intrusion Detection System/Intrusion Prevention System
(IDS/IPS) alerts?
A.
Ensure that the Incident Response Plan is available and current.
B.
Determine the traffic’s initial source and block the appropriate port.
C.
Disable or disconnect suspected target and source systems.
D.
Verify the threat and determine the scope of the attack.