312-49V11: Computer Hacking Forensic InvestigatorDemo

Question

A cybersecurity incident at a Boston-based healthcare provider required the response team to act. They quickly assigned roles, prioritized critical systems for protection, notified executives, and began containing the threat. After removing the malicious code, they restored affected services and later completed a lessons-learned review. Which structured approach best describes the complete method they are following?

A Preparation for IH&R
B Eradication
C Overview of Incident Response Process Flow
D Post-Incident Activities

Explanation

The incident response process encompasses preparation, containment, eradication, recovery, and post-incident lessons learned. An overview of the incident response process flow describes this complete lifecycle, whereas eradication and post-incident activities are only individual phases. NIST describes incident response as spanning preparation through post-incident lessons learned.

Learn more

312-49V11: Computer Hacking Forensic InvestigatorDemo

AstroTutor

Notes

Readiness

QuestionQ449

Community Discussion