Eccouncil 212-89 Exam - Topic 1 Question 31 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 31
Topic #: 1

Alice is an incident handler and she has been informed by her lead that the data on affected systems must be backed up so that it can be retrieved if it is damaged during the incident response process. She was also told that the system backup can also be used for further investigation of the incident. In which of the following stages of the incident handling and response (IH&R) process does Alice need to do a complete backup of the infected system?

AContainment

BIncident recording

CIncident triage

DEradication

Show Suggested Answer

Suggested Answer: A

by Talia at Aug 19, 2022, 09:01 PM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Yun

10 months ago

I’m surprised they don’t back up right after the incident is detected!

upvoted 0 times

...

Adell

10 months ago

Agreed, eradication makes the most sense for a complete backup.

upvoted 0 times

...

Juliann

10 months ago

Wait, is it really necessary to back up during containment? Seems risky.

upvoted 0 times

...

Reyes

10 months ago

I think it should be during incident recording, right?

upvoted 0 times

...

Lourdes

11 months ago

Definitely before eradication! Backup is crucial.

upvoted 0 times

...

Fallon

11 months ago

I thought backups were part of the incident recording stage, but now I'm second-guessing if it should be done during containment instead.

upvoted 0 times

...

Tresa

11 months ago

I feel like backing up the system is crucial before eradication, but I wonder if it should be done earlier in the process.

upvoted 0 times

...

Beckie

11 months ago

I remember a practice question where we discussed the importance of backups, but I can't recall if it was during incident recording or triage.

upvoted 0 times

...

Dino

11 months ago

I think the backup should happen during the containment phase, but I'm not entirely sure if that's the right stage.

upvoted 0 times

...

Francesco

11 months ago

Okay, let me see here. I know product type and base unit of measure are important, but I'm not sure about the other options. I'll have to review my notes on production master setup.

upvoted 0 times

...

Carin

11 months ago

This looks straightforward - I think the answer is B, using the Site Development > Site Import & Export Business Manager module.

upvoted 0 times

...

Tommy

11 months ago

This looks like a classic operations management question. I think I know the answer, but let me think it through carefully.

upvoted 0 times

...

James

1 year ago

D. Eradication is the way to go. Gotta back up that data before you start swinging the metaphorical sledgehammer around, you know?

upvoted 0 times

Mari

1 year ago

A: So true, it's better to be safe than sorry when dealing with sensitive data.

upvoted 0 times

...

Kirk

1 year ago

B: I agree, it's important to have a safety net in case things go south during the eradication process.

upvoted 0 times

...

Kiley

1 year ago

A: Definitely, backing up the data is crucial before taking any drastic actions.

upvoted 0 times

...

Johnetta

1 year ago

Haha, this question is a real brain-teaser! I'm going to go with D. Eradication. You can't spell 'eradication' without 'data', right?

upvoted 0 times

...

Clare

1 year ago

I believe the backup should be done during Incident triage to prevent any data loss during the response process.

upvoted 0 times

...

Alex

1 year ago

I was considering C. Incident triage, but now I'm leaning towards D. Eradication. Backing up the data is crucial for eradicating the incident and analyzing it later.

upvoted 0 times