The IH&R team in an organization was handling a recent malware attack on one of the hosts connected to the organization's network. Edwin, a member of the IH&R team, was involved in reinstating lost data from the backup medi
a. Before performing this step, Edwin ensured that the backup does not have any traces of malware.
Identify the IH&R step performed by Edwin in the above scenario.
Suggested Answer: D
Get Premium 212-82 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
GA
Gary
11 months ago
Wait, how can we be sure the backup was clean? Sounds risky!
JE
Jesusita
11 months ago
Totally agree, recovery is the right step here!
JE
Jesus
12 months ago
Recovery makes sense, but why check for malware if it's already contained?
DE
Deeanna
12 months ago
I think it's more about eradication since he checked for malware.
AD
Adelina
1 year ago
Edwin was definitely in the recovery phase.
HE
Helga
1 year ago
I feel like this is definitely about recovery, but I wonder if there’s a part of containment involved too since he was checking for malware.
DO
Domitila
1 year ago
This reminds me of a practice question where we discussed the importance of ensuring backups are clean before recovery.
JE
Jerry
1 year ago
I'm not entirely sure, but it seems like it could also involve eradication since he checked for malware in the backup.
SA
Sang
1 year ago
I think Edwin's step was related to recovery since he was restoring lost data from the backup.
XE
Xenia
1 year ago
Okay, let me think this through. In an emergency, the priority is to provide appropriate treatment, so the provider should be able to use their best judgment to disclose PHI as needed. I think option C is the way to go.
EL
Elly
1 year ago
I'm leaning toward "none," but that doesn't seem right for avoiding deadlocks... I'll need to double-check our notes on this.
DC
DC
4 years ago
Shouldn't the answer to this question be A?