Eccouncil Exam 212-89 Topic 1 Question 31 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 31
Topic #: 1

Alice is an incident handler and she has been informed by her lead that the data on affected systems must be backed up so that it can be retrieved if it is damaged during the incident response process. She was also told that the system backup can also be used for further investigation of the incident. In which of the following stages of the incident handling and response (IH&R) process does Alice need to do a complete backup of the infected system?

AContainment

BIncident recording

CIncident triage

DEradication

Show Suggested Answer

Suggested Answer: A

by Talia at Aug 19, 2022, 09:01 PM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

James

1 months ago

D. Eradication is the way to go. Gotta back up that data before you start swinging the metaphorical sledgehammer around, you know?

upvoted 0 times

Mari

16 hours ago

A: So true, it's better to be safe than sorry when dealing with sensitive data.

upvoted 0 times

...

Kirk

7 days ago

B: I agree, it's important to have a safety net in case things go south during the eradication process.

upvoted 0 times

...

Kiley

19 days ago

A: Definitely, backing up the data is crucial before taking any drastic actions.

upvoted 0 times

...

Johnetta

2 months ago

Haha, this question is a real brain-teaser! I'm going to go with D. Eradication. You can't spell 'eradication' without 'data', right?

upvoted 0 times

...

Clare

2 months ago

I believe the backup should be done during Incident triage to prevent any data loss during the response process.

upvoted 0 times

...

Alex

2 months ago

I was considering C. Incident triage, but now I'm leaning towards D. Eradication. Backing up the data is crucial for eradicating the incident and analyzing it later.

upvoted 0 times