Drag and drop the elements from the left into the correct order for incident handling on the right.

An engineer received an alert affecting the degraded performance of a critical server. Analysis showed a heavy CPU and memory load. What is the next step the engineer should take to investigate this resource usage?

Refer to the exhibit.

What does the message indicate?

How does an SSL certificate impact security between the client and the server?

During which phase of the forensic process is data that is related to a specific event labeled and recorded to preserve its integrity?