nerdexam
EC-Council

312-39 · Question #176

Which of the following is a correct flow of the stages in an incident handling and response (IH&R) process?

The correct answer is B. Preparation -> Incident Recording -> Incident Triage -> Containment -> Eradication -> Recovery -. The correct flow of stages in an Incident Handling and Response (IH&R) process typically follows a incidents. This is followed by Incident Recording, where details of the incident are documented. Incident Triage is the next stage, where incidents are prioritized based on their…

Security Incident Response

Question

Which of the following is a correct flow of the stages in an incident handling and response (IH&R) process?

Options

  • AContainment -> Incident Recording -> Incident Triage -> Preparation -> Recovery -> Eradication -
  • BPreparation -> Incident Recording -> Incident Triage -> Containment -> Eradication -> Recovery -
  • CIncident Triage -> Eradication -> Containment -> Incident Recording -> Preparation -> Recovery -
  • DIncident Recording -> Preparation -> Containment -> Incident Triage -> Recovery -> Eradication -

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    91% (29)
  • C
    6% (2)

Explanation

The correct flow of stages in an Incident Handling and Response (IH&R) process typically follows a incidents. This is followed by Incident Recording, where details of the incident are documented. Incident Triage is the next stage, where incidents are prioritized based on their impact. Containment strategies are then employed to limit the spread of the incident. Eradication involves removing the threat from the affected systems. Recovery is the process of restoring systems to normal operation. Finally, Post-Incident Activities involve learning from the incident and improving future response efforts. the EC-Council’s Certified Incident Handler (E|CIH) program and related training materials, which emphasize the importance of a structured and methodical approach to incident handling and

Topics

#IH&R process flow#incident response stages#incident handling workflow

Community Discussion

No community discussion yet for this question.

Full 312-39 Practice