CompTIA

CY0-001 · Question #62

When should containment occur during the incident response lifecycle?

The correct answer is B. Before eradication. Containment follows identification and precedes eradication.

Cyber Incident Response

Question

When should containment occur during the incident response lifecycle?

Options

AImmediately after recovery
BBefore eradication
CBefore identification
DAfter lessons learned

How the community answered

(17 responses)

B
94% (16)
C
6% (1)

Explanation

Containment follows identification and precedes eradication.

Topics

#incident response lifecycle#containment#eradication#IR phases

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full CY0-001 Practice