The PRIMARY goal of the incident eradication phase is to:

The correct answer is A. mitigate the source of the breach. The primary goal of the incident eradication phase is to eliminate the root cause of the security incident to prevent further damage or recurrence. This may involve removing malware, closing exploited vulnerabilities, revoking compromised credentials, or restoring affected…

Submitted by luis.pe· Apr 18, 2026Information Security Incident Management

Question

Options

Amitigate the source of the breach.
Bsecure and preserve evidence.
Cperform lessons learned.
Dassess the business impact

How the community answered

(47 responses)

A
94% (44)
C
4% (2)
D
2% (1)

Explanation

The primary goal of the incident eradication phase is to eliminate the root cause of the security incident to prevent further damage or recurrence. This may involve removing malware, closing exploited vulnerabilities, revoking compromised credentials, or restoring affected systems. While securing evidence, lessons learned, and impact assessments are important, they are not the main focus of the eradication phase.

Topics

#Incident Management#Incident Response Phases#Eradication Phase#Breach Mitigation

Community Discussion

No community discussion yet for this question.

Full CISM Practice