Containment is the phase where an organization attempts to minimize the damage caused by a security incident. This may involve isolating affected systems, blocking malicious traffic, or temporarily shutting down compromised services to prevent further impact.
* Recovery (A) focuses on restoring normal operations after an incident.
* Preparation (C) involves planning and readiness before an incident occurs.
* Analysis (D) involves investigating the root cause and assessing the damage.

A Master Service Agreement (MSA) establishes the general terms and conditions for ongoing business engagements. This allows companies to reuse the same terms across multiple contracts, revisiting them periodically for updates.
* NDA (B) protects confidential information but does not define service terms.
* MOU (C) is a non-binding agreement, often used for partnerships, not formal service contracts.
* SLA (D) focuses on service performance expectations, not overall contract terms.

Detailed Explanation:
Sanctions imposed for non-compliance can include fines, legal actions, and loss of business licenses. These pose a significant financial and reputational risk to organizations. Reference: CompTIA Security+ SY0-701 Study Guide, Domain 5: Security Program Management, Section: "Regulatory Compliance Risks".

Detailed Explanation:
Time-of-day restrictions limit access to corporate systems based on predefined schedules. This ensures employees can only access resources during their assigned work hours. Reference: CompTIA Security+ SY0-
701 Study Guide, Domain 3: Security Architecture, Section: "Access Control Models".