$14.$Question $14$Which Post Incident activity would include ascertaining exactly what happened and at what times?$1$ pointDocumentation review & updateLessons learned meeting Utilizing collected dataEvidence retension $3.$Question $13$During which stage of a comprehensive Containment, Eradication & Recovery strategy does NIST recommend considering the following: Potential damange to and theft of resources, Need for evidence preservation, and Service availability?$1$ pointContainmentEradicationRecoveryNone of these$12.$Question $12$What is the proper classification for the recovery effort from a breach if you can estimate the total effort required but it will require bringing in additional resources?$1$ pointNot RecoverableSupplementedRegularExtended$11.$Question $11$What is the proper classification for a data breach that resulted in the exposure of sensitive personally identifiable information $($PII$)?1$ pointPrivacy BreachProprietary BreachIntegrity LossNone