Eccouncil Exam 312-39 Topic 3 Question 105 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 105
Topic #: 3

Which of the following is a correct flow of the stages in an incident handling and response (IH&R) process?

AContainment --> Incident Recording --> Incident Triage --> Preparation --> Recovery --> Eradication --> Post-Incident Activities

BPreparation --> Incident Recording --> Incident Triage --> Containment --> Eradication --> Recovery --> Post-Incident Activities

CIncident Triage --> Eradication --> Containment --> Incident Recording --> Preparation --> Recovery --> Post-Incident Activities

DIncident Recording --> Preparation --> Containment --> Incident Triage --> Recovery --> Eradication --> Post-Incident Activities

Show Suggested Answer

Suggested Answer: B

by Geoffrey at May 05, 2025, 07:26 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tresa

5 days ago

I see your point, Ammie. However, I think C) Incident Triage --> Eradication --> Containment --> Incident Recording --> Preparation --> Recovery --> Post-Incident Activities is the correct flow because we need to prioritize triage first.

upvoted 0 times

...

Ammie

9 days ago

But in my opinion, starting with Containment makes more sense to control the incident first before recording it.

upvoted 0 times

...

Virgina

10 days ago

D seems a bit disorganized. Preparation should come before containment, and recovery should happen after eradication.

upvoted 0 times

...

Broderick

11 days ago

I disagree, I believe it is B) Preparation --> Incident Recording --> Incident Triage --> Containment --> Eradication --> Recovery --> Post-Incident Activities.

upvoted 0 times

...

Ammie

26 days ago

I think the correct flow is A) Containment --> Incident Recording --> Incident Triage --> Preparation --> Recovery --> Eradication --> Post-Incident Activities.

upvoted 0 times

...

Sarah

29 days ago

Hmm, C doesn't look right. Triage should happen before eradication, not the other way around.

upvoted 0 times

...

Sue

1 months ago

Option B seems a bit off. Preparation should come before triage and containment, not after.

upvoted 0 times

...

Florinda

1 months ago

I think option A is the correct flow. The stages seem to be in the right order, with containment coming after triage and before eradication.

upvoted 0 times

Marshall

8 days ago

I think option B might be more logical. Having preparation before incident recording seems like a good starting point.

upvoted 0 times

...

Emily

14 days ago

I agree, option A does seem to be the correct flow. It makes sense to have containment before eradication.

upvoted 0 times

...