– Order a similar paper from (Good rated)Why is this strategy preferable to others?)

Continuing with the same scenario used in Part 1, prepare the second part of the plan by answering the following questions. The sections referred to are in NIST SP 800-61.
 Containment, Eradication,​‌‍‍‍‌‍‍‍‌‍‍‍‌‌‌‌‌‌‍‍​ and Recovery: 
1. What strategy should the organization take to contain the incident?
 Why is this strategy preferable to others?
 2. What could happen if the incident were not contained?
 3. What sources of evidence, if any, should the organization acquire
? How would the evidence be acquired?
 Where would it be stored? 
How long should it be retained​‌‍‍‍‌‍‍‍‌‍‍‍‌‌‌‌‌‌‍‍​?