exam questions

Exam EC0-350 All Questions

View all questions & answers for the EC0-350 exam

Exam EC0-350 topic 8 question 122 discussion

Actual exam question from ECCouncil's EC0-350
Question #: 122
Topic #: 8
[All EC0-350 Questions]

Which of the following incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an organization?

  • A. Preparation phase
  • B. Containment phase
  • C. Identification phase
  • D. Recovery phase
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
There are several key elements to have implemented in preparation phase in order to help mitigate any potential problems that may hinder ones ability to handle an incident. For the sake of brevity, the following should be performed:
✑ Policy a policy provides a written set of principles, rules, or practices within an Organization.
✑ Response Plan/Strategy after establishing organizational policies, now it is time to create a plan/strategy to handle incidents. This would include the creation of a backup plan.
✑ Communication having a communication plan is necessary, due to the fact that it may be necessary to contact specific individuals during an incident.
✑ Documentation it is extremely beneficial to stress that this element is particularly necessary and can be a substantial life saver when it comes to incident response.
References: https://www.sans.org/reading-room/whitepapers/incident/incident-handlers-handbook-33901

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Currently there are no comments in this discussion, be the first to comment!
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...