#16What type of detected incident allows the most time for an investigation?AScanningCompromiseDenial-of-serviceMalicious codeExplanation:Answer option A is correct.Scanning incidents are generally reconnaissance attacks. The real damage toa system comes in the subsequent attacks, so you may have some time to react if you detect the scanning attack early
