Question: Incident Response (IR) Suppose that you have been alerted of a potential incident involving a suspected worm spreading via buffer overflow techniques, compromising Microsoft IIS Web servers. As the IR Team leader, it is your responsibility to determine the next steps. 1. Explain in detail the initial steps that would need to be made by you and the IR team in order to respond to this potential incident. 2. Identify which containment strategy would be appropriate in this case, and why