Which two checks does NIST require before a restored asset is placed back into production? Choose two.

Answer: B. Checking the restored asset for indicators of compromise
D. Remediating the root causes of the incident

SP 800-61r3 recommends checking restored assets for indicators of compromise and remediating the root causes of the incident before production use, and verifying the correctness and adequacy of the restoration actions before putting a restored system online.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RC.RP-05.R1