Isaca
CISM · Question #311
Which of the following activities is MOST appropriate to conduct during the eradication phase of a cyber incident response?
The correct answer is D. Mitigate exploited vulnerabilities to stop future incidents. During the eradication phase, the primary focus is on eliminating the root cause of the incident, including mitigating any vulnerabilities that were exploited. This ensures that the same type of attack cannot occur again in the future.
Submitted by eva_at· Apr 18, 2026Information Security Incident Management
Question
Which of the following activities is MOST appropriate to conduct during the eradication phase of a cyber incident response?
Options
- AIsolate affected systems to prevent further damage.
- BRestore affected systems for normal operations.
- CEstimate the amount of damage caused by the incident.
- DMitigate exploited vulnerabilities to stop future incidents.
How the community answered
(23 responses)- A4% (1)
- D96% (22)
Explanation
During the eradication phase, the primary focus is on eliminating the root cause of the incident, including mitigating any vulnerabilities that were exploited. This ensures that the same type of attack cannot occur again in the future.
Topics
#Incident Response#Eradication Phase#Vulnerability Management#Cyber Incident Management
Community Discussion
No community discussion yet for this question.