SSCP · Question #457
What is the PRIMARY goal of incident handling?
The correct answer is D. Contain and repair any damage caused by an event. The PRIMARY goal of incident handling is to contain the incident and repair the damage caused - stopping the bleeding, restoring systems, and returning to normal operations as quickly as possible. Evidence gathering for prosecution (A) and improving preparedness (B, C) are…
Question
Options
- ASuccessfully retrieve all evidence that can be used to prosecute
- BImprove the company's ability to be prepared for threats and disasters
- CImprove the company's disaster recovery plan
- DContain and repair any damage caused by an event.
How the community answered
(62 responses)- A3% (2)
- B2% (1)
- C2% (1)
- D94% (58)
Explanation
The PRIMARY goal of incident handling is to contain the incident and repair the damage caused - stopping the bleeding, restoring systems, and returning to normal operations as quickly as possible. Evidence gathering for prosecution (A) and improving preparedness (B, C) are secondary objectives. The PICERL model (Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned) confirms that containment and eradication are the core operational goals of incident response.
Topics
Community Discussion
No community discussion yet for this question.