Option 1: Incorrect. The incident response process can be both proactive and reactive. While it does involve reacting to incidents that have already occurred, it also includes proactive measures to prevent incidents from happening again in the future.
Option 2: Incorrect. While incident response can involve proactive measures to prevent incidents, it is not solely focused on prevention. It also includes reacting to incidents that have already occurred.
Option 3: Correct. The incident response process is an iterative process that involves continuous improvement based on lessons learned. Organizations should regularly review and update their incident response plans to ensure they are effective and up to date.
Option 4: Incorrect. The incident response process is not a one-time process. It should be an ongoing and continuous process to address security incidents as they occur and to improve the incident response capabilities of the organization.

WPA2 (Wi-Fi Protected Access 2) is currently the most secure encryption method for wireless networks. It uses the Advanced Encryption Standard (AES) algorithm, which provides a high level of protection against unauthorized access. WEP (Wired Equivalent Privacy) is an older encryption method that is considered weak and easily crackable. WPA (Wi-Fi Protected Access) is an improvement over WEP but still has some vulnerabilities. TKIP (Temporal Key Integrity Protocol) is an older encryption method used with WPA that has also been found to have security weaknesses. Therefore, the correct answer is WPA2.

ARP (Address Resolution Protocol) is used for broadcasting and resolving MAC (Media Access Control) addresses to IP addresses within a local network. It helps devices determine the MAC address associated with a given IP address, enabling proper communication on the network. ARP operates at the data link layer of the OSI model.

Vulnerability scanning is conducted to identify potential weaknesses or security flaws in a system or network that could be exploited by attackers. By conducting regular vulnerability scans, organizations can proactively discover and address vulnerabilities before they are exploited, ensuring the overall security and integrity of their systems. This helps in preventing unauthorized access, data breaches, and potential damage to the network infrastructure.

Social engineering techniques, such as phishing, spear phishing, or baiting, are commonly employed by threat actors to gain initial access in an APT. By tricking individuals or organizations into revealing sensitive information or executing malicious actions, attackers can bypass traditional security measures and gain a foothold in the target system.