MENU
James has been appointed as an incident handling and response (IH&R) team lead and
he was assigned to build an IH&R plan along with his own team in the company.
Identify the IH&R process step James is currently working on.
Suggested Answer: C
Get Premium 212-89 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
In the context of incident handling and response (IH&R), the preparation phase is the initial step where teams and resources are organized to effectively respond to potential security incidents. This phase involves building the IH&R team, developing incident response plans and policies, setting up communication channels, and ensuring that the team has the necessary tools and authority to act. James, being assigned to build an IH&R plan and organize his team, is engaging in the preparation step of the incident response process. This foundational step is crucial for ensuring a coordinated and efficient response to incidents when they occur.
34 comments · newest first
MY
My
11 months ago
Really? I thought Notification was the first step.
JA
Jade
11 months ago
Nah, it's definitely Preparation. That's where you build the plan.
NA
Nathan
11 months ago
Wait, isn't he supposed to be in Recovery?
EM
Emmett
12 months ago
Totally agree, it's all about planning first.
SH
Shayne
12 months ago
Sounds like he's in the Preparation phase!
NA
Nan
1 year ago
I could see it being Recovery as well, but that seems more like a later step. I guess Preparation fits better.
ER
Erick
1 year ago
I practiced a similar question, and I believe Preparation is the right answer. It makes sense to have a plan in place first.
AR
Armanda
1 year ago
I'm not so sure, but I remember something about Notification being important too. Maybe he’s just starting out?
TE
Terrilyn
1 year ago
I think James is working on the Preparation step since he's building the IH&R plan with his team.
TH
Theodora
1 year ago
Hmm, I'm a bit confused on this one. The question doesn't provide a lot of context, so it's hard for me to determine which specific step James is working on. I'll need to carefully review the IH&R process steps to make an informed decision.
TI
Tijuana
1 year ago
I think the Preparation step is the right answer here. The question states that James is assigned to build an IH&R plan, which aligns with the Preparation process of the IH&R framework.
LA
Lashawn
1 year ago
Okay, let me think this through. James is building an IH&R plan, which suggests he's in the planning and preparation phase, so I'm going to go with option C, Preparation.
LA
Lawrence
1 year ago
This one seems pretty straightforward. Based on the information provided, James is currently working on the Preparation step of the IH&R process.
SU
Susana
1 year ago
Hmm, I'm not entirely sure about this one. The question mentions that James is building an IH&R plan, so it could be the Preparation step, but I'm not 100% confident. I'll need to review the IH&R process steps again to be sure.
MA
Marleen
2 years ago
Hah, it's clearly Recovery. James is probably already planning the victory dance after the incident is resolved.
FR
Francene
2 years ago
Hmm, I'd say it's Notification. You know, getting the right people informed and all that jazz.
FR
Frederica
2 years ago
Gotta be Preparation, that's where you build the incident response plan. Easy peasy!
NO
Noelia
2 years ago
Haha, I bet James is wishing he had a crystal ball to see the future incidents. Preparation is key, though!
SK
Skye
2 years ago
D) Notification
AL
Alline
2 years ago
C) Preparation
DU
Dusti
2 years ago
B) Recovery
CO
Cory
2 years ago
A) Eradication
RO
Rory
2 years ago
Definitely the Preparation step. Gotta lay the groundwork before you can handle any actual incidents, right?
DE
Deandrea
2 years ago
C) Preparation
TA
Tanesha
2 years ago
B) Recovery
CE
Cecilia
2 years ago
A) Eradication
KA
Kattie
2 years ago
Hmm, I think James is currently working on the Preparation step. Building an IH&R plan sounds like the preparatory phase to me.
RY
Ryan
2 years ago
I see, so Notification is the final step in the process then.
GE
Georgiann
2 years ago
No, Recovery usually follows Preparation in the IH&R process.
MO
Moon
2 years ago
I think Eradication comes after Preparation, right?
KA
Kate
2 years ago
I agree, Preparation seems like the right step to start with.
NI
Nickole
2 years ago
I believe Eradication is also important, but without proper Preparation, it won't be effective.
AL
Alyce
2 years ago
I agree with Jacquline, Preparation is crucial for building a solid IH&R plan.
JA
Jacquline
2 years ago
I think James is currently working on the Preparation step.