312-39 · Question #154
In which of the following incident handling and response stages, the root cause of the incident must be found from the forensic results?
The correct answer is C. Eradication. The eradication stage is where the root cause of the incident is determined from the forensic results. This stage involves not only removing the threat from the affected systems but also identifying and fixing the vulnerabilities that were exploited. It’s crucial to understand…
Question
In which of the following incident handling and response stages, the root cause of the incident must be found from the forensic results?
Options
- AEvidence Gathering
- BEvidence Handling
- CEradication
- DSystems Recovery
How the community answered
(64 responses)- A8% (5)
- B5% (3)
- C86% (55)
- D2% (1)
Explanation
The eradication stage is where the root cause of the incident is determined from the forensic results. This stage involves not only removing the threat from the affected systems but also identifying and fixing the vulnerabilities that were exploited. It’s crucial to understand how the incident occurred to prevent future occurrences. After the containment stage, where the immediate threat is isolated, eradication ensures that the threat is completely removed and that the root cause is addressed. incident handling and response, which include preparation, identification, containment, eradication, recovery, and lessons learned. The eradication stage specifically deals with eliminating the threat and addressing the root cause based on forensic analysis. This information is covered in the E|CIH program and can be found in the official EC-Council learning resources1.
Topics
Community Discussion
No community discussion yet for this question.