The incident response phase focused on limiting the spread and impact of an active incident immediately.
Want to actually apply concepts like this instead of just reading definitions?