Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council 212-82 Exam - Topic 1 Question 5 Discussion

Posted by Rima on Oct 25, 2022 at 01:10 PM

The IH&R team in an organization was handling a recent malware attack on one of the hosts connected to the organization's network. Edwin, a member of the IH&R team, was involved in reinstating lost data from the backup medi

a. Before performing this step, Edwin ensured that the backup does not have any traces of malware.

Identify the IH&R step performed by Edwin in the above scenario.

Suggested Answer: D

Get Premium 212-82 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
12 comments · newest first
GA
Gary 11 months ago
Wait, how can we be sure the backup was clean? Sounds risky!
JE
Jesusita 11 months ago
Totally agree, recovery is the right step here!
JE
Jesus 12 months ago
Recovery makes sense, but why check for malware if it's already contained?
DE
Deeanna 12 months ago
I think it's more about eradication since he checked for malware.
AD
Adelina 1 year ago
Edwin was definitely in the recovery phase.
HE
Helga 1 year ago
I feel like this is definitely about recovery, but I wonder if there’s a part of containment involved too since he was checking for malware.
DO
Domitila 1 year ago
This reminds me of a practice question where we discussed the importance of ensuring backups are clean before recovery.
JE
Jerry 1 year ago
I'm not entirely sure, but it seems like it could also involve eradication since he checked for malware in the backup.
SA
Sang 1 year ago
I think Edwin's step was related to recovery since he was restoring lost data from the backup.
XE
Xenia 1 year ago
Okay, let me think this through. In an emergency, the priority is to provide appropriate treatment, so the provider should be able to use their best judgment to disclose PHI as needed. I think option C is the way to go.
EL
Elly 1 year ago
I'm leaning toward "none," but that doesn't seem right for avoiding deadlocks... I'll need to double-check our notes on this.
DC
DC 4 years ago
Shouldn't the answer to this question be A?
0/2000 characters

Save Cancel