In which of the following stages of incident handling and response (IH&R) process do the incident handlers try to find out the root cause of the incident along with the threat actors behind the…

The correct answer is C. Evidence gathering and forensics analysis. During the incident handling and response (IH&R) process, the stage of "Evidence gathering and forensics analysis" involves the collection of evidence, forensic analysis, and detailed investigation to uncover the root cause of the incident. This stage is crucial for…

Incident Handling and Response Process

Question

In which of the following stages of incident handling and response (IH&R) process do the incident handlers try to find out the root cause of the incident along with the threat actors behind the incidents, threat vectors, etc.?

Options

APost-incident activities
BIncident triage
CEvidence gathering and forensics analysis
DIncident recording and assignment

How the community answered

(27 responses)

A
4% (1)
C
93% (25)
D
4% (1)

Explanation

During the incident handling and response (IH&R) process, the stage of "Evidence gathering and forensics analysis" involves the collection of evidence, forensic analysis, and detailed investigation to uncover the root cause of the incident. This stage is crucial for understanding how the incident occurred, identifying the threat actors involved, the methods they used (threat vectors), and the extent of the impact. By analyzing evidence, incident responders can reconstruct the sequence of events, identify the vulnerabilities exploited, and determine the scope of the incident. This information is vital for resolving the incident effectively and taking steps to prevent future occurrences.

Topics

#IH&R process stages#root cause analysis#forensics analysis#threat actor identification

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice