The _______ phase of incident response focuses on restoring normal operations.

Group of answer choices

preparation

recovery

analysis

detection

1 answer

The correct answer is recovery. The recovery phase of incident response is focused on restoring normal operations after a security incident has occurred.