1. What risk-mitigation security controls or security countermeasures do you recommend for the portion of the network for which you created a CIRT response plan? Explain your answer.
2. How does a CIRT plan help an organization mitigate risk?
3. How does the CIRT post-mortem review help mitigate risk?
4. Why is it a good idea to have a protocol analyzer as one of your incident response tools when examining Internet Protocol (IP) Local Area Network (LAN) network performance or connectivity issues?