| Exam 200-201 | Question id=5959 | Security policies and procedures |
Which principle is being followed when an analyst gathers information relevant to a security incident to determine the appropriate course of action?
| A. |
decision making | |
| B. |
rapid response | |
| C. |
data mining | |
| D. |
due diligence |