Which of the following stages if the Incident Handling Response does this describe?

A network security analyst has confirmed that the public facing web server has been
compromised. Which of the following stages if the Incident Handling Response does this
describe?

A.
Analyzing

B.
Recovering