What does the 'Recovery' control function do? a. Detect attacks b. Restore services post-incident c. Discourage attackers d. Prevent system reboot

The 'Recovery' control function is primarily focused on restoring services post-incident. Therefore, the correct answer is: b. Restore services post-incident