Which two factors does NIST say containment criteria may weigh? Choose two.

Answer: D. The incident type, such as a cloud services compromise or an endpoint ransomware infection
A. The intended duration of the measure — an emergency workaround, a temporary fix, or a permanent solution

SP 800-61r3 notes containment criteria could take the incident type into account and use some of the risk evaluation factors, and that another factor is the duration of the containment measure, from emergency workaround through temporary to permanent.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.MI.N1