Eccouncil 212-89 Exam - Topic 1 Question 31 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 31
Topic #: 1

Alice is an incident handler and she has been informed by her lead that the data on affected systems must be backed up so that it can be retrieved if it is damaged during the incident response process. She was also told that the system backup can also be used for further investigation of the incident. In which of the following stages of the incident handling and response (IH&R) process does Alice need to do a complete backup of the infected system?

AContainment

BIncident recording

CIncident triage

DEradication

Show Suggested Answer

Suggested Answer: A

by Talia at Aug 19, 2022, 09:01 PM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Yun

5 months ago

I’m surprised they don’t back up right after the incident is detected!

upvoted 0 times

...

Adell

5 months ago

Agreed, eradication makes the most sense for a complete backup.

upvoted 0 times

...

Juliann

6 months ago

Wait, is it really necessary to back up during containment? Seems risky.

upvoted 0 times

...

Reyes

6 months ago

I think it should be during incident recording, right?

upvoted 0 times

...

Lourdes

6 months ago

Definitely before eradication! Backup is crucial.

upvoted 0 times

...

Fallon

6 months ago

I thought backups were part of the incident recording stage, but now I'm second-guessing if it should be done during containment instead.

upvoted 0 times

...

Tresa

6 months ago

I feel like backing up the system is crucial before eradication, but I wonder if it should be done earlier in the process.

upvoted 0 times

...

Beckie

6 months ago

I remember a practice question where we discussed the importance of backups, but I can't recall if it was during incident recording or triage.

upvoted 0 times

...

Dino

6 months ago

I think the backup should happen during the containment phase, but I'm not entirely sure if that's the right stage.

upvoted 0 times

...

Francesco

6 months ago

Okay, let me see here. I know product type and base unit of measure are important, but I'm not sure about the other options. I'll have to review my notes on production master setup.

upvoted 0 times

...

Carin

6 months ago

This looks straightforward - I think the answer is B, using the Site Development > Site Import & Export Business Manager module.

upvoted 0 times

...

Tommy

6 months ago

This looks like a classic operations management question. I think I know the answer, but let me think it through carefully.

upvoted 0 times

...

James

11 months ago

D. Eradication is the way to go. Gotta back up that data before you start swinging the metaphorical sledgehammer around, you know?

upvoted 0 times

Mari

10 months ago

A: So true, it's better to be safe than sorry when dealing with sensitive data.

upvoted 0 times

...

Kirk

10 months ago

B: I agree, it's important to have a safety net in case things go south during the eradication process.

upvoted 0 times

...

Kiley

11 months ago

A: Definitely, backing up the data is crucial before taking any drastic actions.

upvoted 0 times

...

Johnetta

12 months ago

Haha, this question is a real brain-teaser! I'm going to go with D. Eradication. You can't spell 'eradication' without 'data', right?

upvoted 0 times

...

Clare

12 months ago

I believe the backup should be done during Incident triage to prevent any data loss during the response process.

upvoted 0 times

...

Alex

12 months ago

I was considering C. Incident triage, but now I'm leaning towards D. Eradication. Backing up the data is crucial for eradicating the incident and analyzing it later.

upvoted 0 times