Which sequence best describes incident response steps after a security breach in an AFCOMAC environment, including post-incident lessons?

• A. Detect; contain; recover; close.
• B. Plan; implement; evaluate; report.
• C. Prepare, detect/analysis, contain/eradicate, recover, and conduct post-incident lessons learned.
• D. Assess; assign; remediate; verify.

Answer: (C)