Which one of the following is the correct flow of the stages in an incident handling and response (IH&R) process?

Question

Options

• AEradication -> Preparation -> Incident recording -> Incident triage -> Containment -> Recovery ->
• BContainment -> Incident recording -> Incident triage -> Preparation -> Recovery -> Eradication ->
• CIncident recording -> Preparation -> Containment -> Incident triage -> Recovery -> Eradication ->
• DIncident triage -> Eradication -> Containment -> Incident recording -> Preparation -> Recovery ->

• A
  85% (22)
• B
  8% (2)
• C
  4% (1)
• D
  4% (1)

Explanation

The correct flow of stages in an Incident Handling and Response (IH&R) process as outlined in the Incident Handler (ECIH v3) by EC-Council begins with Preparation. This phase involves getting ready for potential incidents by developing plans, policies, and procedures, and ensuring that tools and team training are up to date. Incident Recording is the next stage, where incidents are documented and reported. Incident Triage follows, prioritizing incidents based on their impact and urgency. Containment is next, aiming to limit the damage of the incident and prevent further spread. Eradication comes after containment, where the root cause of the incident is removed. Recovery is the stage where affected systems are restored to their operational status. Post- Incident Activities conclude the process, reviewing and learning from the incident to improve future response efforts.

No community discussion yet for this question.