Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil Exam 212-89 Topic 1 Question 31 Discussion

Actual exam question for Eccouncil's 212-89 exam
Question #: 31
Topic #: 1
[All 212-89 Questions]

Alice is an incident handler and she has been informed by her lead that the data on affected systems must be backed up so that it can be retrieved if it is damaged during the incident response process. She was also told that the system backup can also be used for further investigation of the incident. In which of the following stages of the incident handling and response (IH&R) process does Alice need to do a complete backup of the infected system?

Show Suggested Answer Hide Answer
Suggested Answer: A

Contribute your Thoughts:

Clare
2 days ago
I believe the backup should be done during Incident triage to prevent any data loss during the response process.
upvoted 0 times
...
Alex
5 days ago
I was considering C. Incident triage, but now I'm leaning towards D. Eradication. Backing up the data is crucial for eradicating the incident and analyzing it later.
upvoted 0 times
...
Caitlin
8 days ago
I think the answer is D. Eradication. It makes sense to back up the data during this stage to preserve evidence for further investigation.
upvoted 0 times
...
Tracie
8 days ago
I agree with Isidra, backing up during Eradication makes sense to ensure we have the data for further investigation.
upvoted 0 times
...
Isidra
11 days ago
I think I need to do a complete backup during the Eradication stage.
upvoted 0 times
...

Save Cancel