GIAC
GCIH · Question #380
Which of the following occurs during the recovery phase of an incident?
The correct answer is B. Restore operations. At this point, it's time to determine when to bring the system back in to production and how long we monitor the system for any signs of abnormal activity.
Incident Response & Cyber Kill Chain
Question
Which of the following occurs during the recovery phase of an incident?
Options
- ADetermine cause and symptoms
- BRestore operations
- CImprove defenses
- DDevelop a report to follow up on the incident
How the community answered
(49 responses)- A2% (1)
- B94% (46)
- D4% (2)
Explanation
At this point, it's time to determine when to bring the system back in to production and how long we monitor the system for any signs of abnormal activity.
Topics
#recovery phase#IR lifecycle#system restoration#incident response phases
Community Discussion
No community discussion yet for this question.