Answer is D
Book - Module 2 - Page 263
"After Eliminating the cause of the incident from all systems and resources, the IH&R team must recover and (restore) the affected system..."
- so {Restoration} comes first, and answer can't be C because the system has to be under monitoring to ensure no traces are left.
This should be D. You restore first, then validate, then it should be operational. Once operational, you monitor for any unseen or issues that will arise
This section is not available anymore. Please use the main Exam Page.212-89 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Sabalii
Highly Voted 1 year, 9 months agoPraezin
Most Recent 11 months, 2 weeks agos3curity1
2 years, 4 months agorimdogg
2 years, 7 months agobung1
2 years, 12 months ago