Which of the following are the primary goals of the incident handling team? Each correct answer represents a complete solution. Choose all that apply.

Preventing further damage is a core containment goal achieved by isolating affected systems, blocking malicious traffic, or disabling compromised accounts to stop the spread of an incident.

Freezing the scene means preserving the state of affected systems and evidence before remediation begins, which is critical for maintaining forensic integrity and supporting post-incident analysis.

Repairing damage - including restoring data from backups, patching exploited vulnerabilities, and returning systems to normal operation - constitutes the recovery phase and is a defined primary objective of incident handling.

Informing higher authorities is a communication and escalation procedure that may occur during an incident but is not classified as a primary technical goal of the incident handling team, whose focus is containment, preservation, and recovery.