nerdexam
EC-CouncilEC-Council

312-50V13 · Question #172

312-50V13 Question #172: Real Exam Question with Answer & Explanation

The correct answer is A: Create an incident checklist.. Explanation Creating an incident checklist (Option A) is the ideal solution because it provides a quick-reference tool that ensures all steps are followed consistently during high-stress situations, requiring minimal ongoing administrative effort to maintain and use. A checklist

Submitted by carter_n· Mar 6, 2026Introduction to Ethical Hacking

Question

John is an incident handler at a financial institution. His steps in a recent incident are not up to the standards of the company. John frequently forgets some steps and procedures while handling responses as they are very stressful to perform. Which of the following actions should John take to overcome this problem with the least administrative effort?

Options

  • ACreate an incident checklist.
  • BSelect someone else to check the procedures.
  • CIncrease his technical skills.
  • DRead the incident manual every time it occurs.

Explanation

Explanation

Creating an incident checklist (Option A) is the ideal solution because it provides a quick-reference tool that ensures all steps are followed consistently during high-stress situations, requiring minimal ongoing administrative effort to maintain and use. A checklist is a one-time creation that standardizes the process without relying on memory, making it the most efficient countermeasure for human error under pressure.

Why the distractors are wrong:

  • Option B (selecting someone else to check procedures) adds administrative overhead, introduces dependency on another person's availability, and doesn't resolve John's own competency gap.
  • Option C (increasing technical skills) doesn't directly address the problem of forgetting procedural steps, which is a process issue rather than a skills issue.
  • Option D (reading the incident manual every time) is time-consuming, impractical during an active incident, and represents high administrative effort - the opposite of what the question asks for.

Memory Tip 🧠

Think of incident response like a pilot's pre-flight routine - pilots always use checklists, not manuals, because checklists are fast, reliable, and stress-proof. Whenever an exam question mentions forgetting steps or least administrative effort, a checklist is almost always the right answer.

Topics

#Incident Handling#Incident Response#Checklists#Process Improvement

Community Discussion

No community discussion yet for this question.

Full 312-50V13 PracticeBrowse All 312-50V13 Questions