Eccouncil Exam 212-89 Topic 1 Question 31 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 31
Topic #: 1

Alice is an incident handler and she has been informed by her lead that the data on affected systems must be backed up so that it can be retrieved if it is damaged during the incident response process. She was also told that the system backup can also be used for further investigation of the incident. In which of the following stages of the incident handling and response (IH&R) process does Alice need to do a complete backup of the infected system?

AContainment

BIncident recording

CIncident triage

DEradication

Show Suggested Answer

Suggested Answer: A

by Talia at Aug 19, 2022, 09:01 PM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Johnetta

18 hours ago

Haha, this question is a real brain-teaser! I'm going to go with D. Eradication. You can't spell 'eradication' without 'data', right?

upvoted 0 times

...

Clare

11 days ago

I believe the backup should be done during Incident triage to prevent any data loss during the response process.

upvoted 0 times

...

Alex

14 days ago

I was considering C. Incident triage, but now I'm leaning towards D. Eradication. Backing up the data is crucial for eradicating the incident and analyzing it later.

upvoted 0 times

...