exam questions

Exam 212-89 All Questions

View all questions & answers for the 212-89 exam

Exam 212-89 topic 1 question 7 discussion

Actual exam question from ECCouncil's 212-89
Question #: 7
Topic #: 1
[All 212-89 Questions]

Which of the following is an appropriate flow of the incident recovery steps?

  • A. System Operation-System Restoration-System Validation-System Monitoring
  • B. System Validation-System Operation-System Restoration-System Monitoring
  • C. System Restoration-System Monitoring-System Validation-System Operations
  • D. System Restoration-System Validation-System Operations-System Monitoring
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Sabalii
Highly Voted 1 year, 9 months ago
Answer is D Book - Module 2 - Page 263 "After Eliminating the cause of the incident from all systems and resources, the IH&R team must recover and (restore) the affected system..." - so {Restoration} comes first, and answer can't be C because the system has to be under monitoring to ensure no traces are left.
upvoted 5 times
...
Praezin
Most Recent 11 months, 2 weeks ago
Crumbs, I lost my access to the book on evantage. Is it worth it to buy from EC-Council? Or are there other options?
upvoted 1 times
...
s3curity1
2 years, 4 months ago
This should be D. You restore first, then validate, then it should be operational. Once operational, you monitor for any unseen or issues that will arise
upvoted 3 times
...
rimdogg
2 years, 7 months ago
Why A? would you not restore the system and validate it before its operational?
upvoted 1 times
...
bung1
2 years, 12 months ago
answer is A
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...