Which two elements of the incident response process are stated in NIST Special Publication 800-61 r2? (Choose two.)

A.	detection and analysis
B.	post-incident activity
C.	vulnerability management
D.	risk assessment
E.	vulnerability scoring