CERTIFIED-IN-CYBERSECURITY · Question #466
Which of the following is NOT a category of the incident response process?
The correct answer is B. Retention. The standard phases of the incident response (IR) lifecycle include: Preparation, Detection (and Analysis), Containment, Eradication, Recovery, and Lessons Learned (Post-Incident Activity). 'Retention' is not a phase of incident response - it relates to data governance and…
Question
Which of the following is NOT a category of the incident response process?
Options
- AContainment
- BRetention
- CPreparation
- DDetection
How the community answered
(42 responses)- A2% (1)
- B90% (38)
- C5% (2)
- D2% (1)
Explanation
The standard phases of the incident response (IR) lifecycle include: Preparation, Detection (and Analysis), Containment, Eradication, Recovery, and Lessons Learned (Post-Incident Activity). 'Retention' is not a phase of incident response - it relates to data governance and records management policies, not IR. All the other choices (Containment, Preparation, Detection) are legitimate, recognized IR phases.
Topics
Community Discussion
No community discussion yet for this question.