Which of the following techniques is MOST useful when an incident response team needs to respond to external attacks on multiple corporate network devices?

A. Penetration testing of network devices
B. Vulnerability assessment of network devices
C. Endpoint baseline configuration analysis
D. Security event correlation analysis