Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us [email protected]
Menu

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
Eccouncil Discussions

Exam 212-89 topic 1 question 39 discussion

Actual exam question from ECCouncil's 212-89
Question #: 39
Topic #: 1
[All 212-89 Questions]

The data on the affected system must be backed up so that it can be retrieved if it is damaged during incident response. The system backup can also be used for further investigations of the incident. Identify the stage of the incident response and handling process in which complete backup of the infected system is carried out?

  • A. Containment
  • B. Eradication
  • C. Incident recording
  • D. Incident investigation
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by Hems85 at April 2, 2022, 9:34 p.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
Gianmm99
3 weeks, 5 days ago
Selected Answer: A
A is correct answer - module 2, pg 315
upvoted 1 times
...
TheDeathStar
1 month, 2 weeks ago
Answer is A page 249 to 250
upvoted 1 times
...
Anzk
4 months, 2 weeks ago
answer id D
upvoted 1 times
...
Anzk
4 months, 2 weeks ago
A is correct answer - module 2, pg 315
upvoted 1 times
...
Ijoakob
2 years ago
Must be A , common tecniques of contaiment, Moule 2 page 250
upvoted 4 times
...
Hems85
2 years, 1 month ago
Should be C - Incident recording.
upvoted 1 times
s3curity00
1 year, 10 months ago
No. Incident recording is just plain recording. Backups aren't being taken during recording of the incident. It's taken under the containment phase as backups can be used for further investigation if needed and if there is something we need to restore.
upvoted 1 times
...
s3curity01
1 year, 10 months ago
Incident recording only records/collects information about the incident which is to be sent to IR department for analysis and validation. No other activities are to be performed especially taking backups, which is being done on containment phase.
upvoted 2 times
...
...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel