MENU
In which of the following phases of incident handling and response (IH&R) process the identified security incidents are analyzed, validated, categorized, and prioritized?
Suggested Answer: B
Get Premium 212-89 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Email Dossier is a tool designed to perform detailed investigations on email messages to verify their authenticity and trace their origin. It can analyze email headers and provide information about the route an email has taken, the servers it passed through, and potentially malicious links or origins. For an incident handler like Stenley, tasked with verifying the validity of emails and containing malicious email threats, Email Dossier serves as a practical tool for analyzing and validating emails received by employees. By using this tool, Stenley can identify fraudulent or suspicious emails, thereby helping to protect the organization from phishing attacks, malware distribution, and other email-based threats.
34 comments · newest first
AN
An
11 months ago
Nah, I still think A could be right.
VI
Viki
11 months ago
Totally agree, D is where the real analysis happens.
RO
Roy
11 months ago
Wait, are we sure about that? Seems a bit tricky.
LE
Leatha
12 months ago
I thought it was A at first, but D makes more sense.
PA
Pa
12 months ago
It's definitely D, incident triage!
GU
Gussie
1 year ago
I thought notification was just about informing stakeholders, so it can't be that. I guess it must be incident triage after all.
KA
Karma
1 year ago
I'm leaning towards incident triage too, but I keep mixing it up with containment. They both seem so related!
PE
Pearline
1 year ago
I remember practicing a question similar to this, and I think incident recording and assignment is more about logging the incidents rather than analyzing them.
LE
Levi
1 year ago
I think the phase where incidents are analyzed and prioritized is called incident triage, but I'm not completely sure.
MI
Michael
1 year ago
Wait, I'm a little confused. Is it the incident triage phase or the containment phase? I need to review my notes on the incident handling process again.
HE
Heike
1 year ago
Okay, I've got this. The incident triage phase is where the incidents are analyzed, validated, categorized, and prioritized. I'm confident that's the right answer.
YA
Yasuko
1 year ago
Hmm, I'm a bit unsure about this one. The phases of incident handling can be tricky to remember. Let me think this through carefully.
DA
Daniel
1 year ago
This seems like a straightforward question about the incident handling process. I think the key is to focus on the specific phases mentioned in the question.
CA
Carmen
2 years ago
Incident triage? More like incident comedy, am I right? Just kidding, but seriously, that's the one.
JA
Jacquline
1 year ago
Definitely, without proper incident triage, it would be difficult to effectively respond to security incidents.
SI
Silva
1 year ago
It's a crucial phase in the incident handling and response process.
AL
Alishia
1 year ago
Yes, you're right! Incident triage is where the identified security incidents are analyzed, validated, categorized, and prioritized.
MI
Ming
2 years ago
Incident triage, for sure. That's where the magic happens - where the experts separate the wheat from the chaff, you know?
DE
Derick
1 year ago
Without proper incident triage, it would be chaos trying to handle all security incidents at once.
AN
Antonio
1 year ago
Definitely, it helps in efficiently allocating resources and focusing on what matters most.
OW
Owen
1 year ago
It's like the first line of defense, making sure the most critical issues are addressed first.
ET
Ettie
1 year ago
I agree, incident triage is crucial for prioritizing security incidents.
RA
Raylene
2 years ago
I'm going with option D. Incident triage just makes the most sense for this phase of the process.
BA
Bambi
2 years ago
Incident triage seems like the obvious choice here. Gotta sort out the details before you can contain or notify anyone.
YU
Yuriko
1 year ago
That's correct. Incident triage is crucial for sorting out the details.
DA
Daren
1 year ago
So, incident recording and assignment comes before incident triage, right?
MI
Mitsue
1 year ago
Yeah, incident triage is where we analyze and prioritize the security incidents.
KA
Kasandra
1 year ago
Once we prioritize and categorize the incident, we can take appropriate actions to contain it.
EU
Eura
1 year ago
I think it's D) Incident triage.
MA
Maryanne
1 year ago
I agree, incident triage is essential to understand the severity of the incident.
LE
Lenna
2 years ago
Hmm, this one's a tricky one. I bet the answer has something to do with analyzing the incident before taking any action.
CO
Corazon
2 years ago
I'm not sure, but it makes sense that incident triage would be the phase for analyzing and categorizing incidents.
ME
Melodie
2 years ago
I agree with Ardella, incident triage is where incidents are analyzed and prioritized.
AR
Ardella
2 years ago
I think the answer is D) Incident triage.