QuestionQ120

Incident and Risk Management

The IH&R team in an organization was responding to a recent malware attack on a host connected to the organization's network. Edwin, an IH&R team member, was involved in restoring lost data from backup media. Before carrying out this step, Edwin verified that the backup contained no traces of malware.

Identify the IH&R step Edwin performed in this scenario.

  • A Eradication
  • B Incident containment
  • C Notification
  • D Recovery
Explanation

Recovery is the incident-handling phase in which systems and lost data are restored to normal operation using verified malware-free backups.

Community Discussion

No comments yet. Be the first to start the discussion!