Exam CISM topic 1 question 281 discussion

b is right Answer Eradication Once you've contained the issue, you need to find and eliminate the root cause of the breach. This means all malware should be securely removed, systems should again be hardened and patched, and updates should be applied

Threat means about to happen, but the question says incidence response process. which means it has happened and what is our goal when it happens. Our goal will be to contain it and restore, therefore, I will go for A.

B. remove the threat and restore affected systems. While all the options listed are important aspects of incident response, the eradication phase specifically focuses on eliminating the threat and restoring affected systems to their normal operational state. This phase is crucial for preventing any further damage or reoccurrence of the incident.

B. remove the threat and restore affected systems. While all the options listed are important aspects of incident response, the eradication phase specifically focuses on eliminating the threat and restoring affected systems to their normal operational state. This phase is crucial for preventing any further damage or reoccurrence of the incident.

B. remove the threat and restore affected systems.

B Is correct

the correct answer is B since by definition eradication: the complete destruction of something. and the only answer that says something remotely close to that is B.

A i guess