New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil 212-89 Exam - Topic 4 Question 67 Discussion

Actual exam question for Eccouncil's 212-89 exam
Question #: 67
Topic #: 4
[All 212-89 Questions]

James has been appointed as an incident handling and response (IH&R) team lead and

he was assigned to build an IH&R plan along with his own team in the company.

Identify the IH&R process step James is currently working on.

Show Suggested Answer Hide Answer
Suggested Answer: C

In the context of incident handling and response (IH&R), the preparation phase is the initial step where teams and resources are organized to effectively respond to potential security incidents. This phase involves building the IH&R team, developing incident response plans and policies, setting up communication channels, and ensuring that the team has the necessary tools and authority to act. James, being assigned to build an IH&R plan and organize his team, is engaging in the preparation step of the incident response process. This foundational step is crucial for ensuring a coordinated and efficient response to incidents when they occur.


Contribute your Thoughts:

0/2000 characters
My
3 months ago
Really? I thought Notification was the first step.
upvoted 0 times
...
Jade
3 months ago
Nah, it's definitely Preparation. That's where you build the plan.
upvoted 0 times
...
Nathan
3 months ago
Wait, isn't he supposed to be in Recovery?
upvoted 0 times
...
Emmett
4 months ago
Totally agree, it's all about planning first.
upvoted 0 times
...
Shayne
4 months ago
Sounds like he's in the Preparation phase!
upvoted 0 times
...
Nan
4 months ago
I could see it being Recovery as well, but that seems more like a later step. I guess Preparation fits better.
upvoted 0 times
...
Erick
4 months ago
I practiced a similar question, and I believe Preparation is the right answer. It makes sense to have a plan in place first.
upvoted 0 times
...
Armanda
4 months ago
I'm not so sure, but I remember something about Notification being important too. Maybe he’s just starting out?
upvoted 0 times
...
Terrilyn
5 months ago
I think James is working on the Preparation step since he's building the IH&R plan with his team.
upvoted 0 times
...
Theodora
5 months ago
Hmm, I'm a bit confused on this one. The question doesn't provide a lot of context, so it's hard for me to determine which specific step James is working on. I'll need to carefully review the IH&R process steps to make an informed decision.
upvoted 0 times
...
Tijuana
5 months ago
I think the Preparation step is the right answer here. The question states that James is assigned to build an IH&R plan, which aligns with the Preparation process of the IH&R framework.
upvoted 0 times
...
Lashawn
5 months ago
Okay, let me think this through. James is building an IH&R plan, which suggests he's in the planning and preparation phase, so I'm going to go with option C, Preparation.
upvoted 0 times
...
Lawrence
5 months ago
This one seems pretty straightforward. Based on the information provided, James is currently working on the Preparation step of the IH&R process.
upvoted 0 times
...
Susana
5 months ago
Hmm, I'm not entirely sure about this one. The question mentions that James is building an IH&R plan, so it could be the Preparation step, but I'm not 100% confident. I'll need to review the IH&R process steps again to be sure.
upvoted 0 times
...
Marleen
1 year ago
Hah, it's clearly Recovery. James is probably already planning the victory dance after the incident is resolved.
upvoted 0 times
...
Francene
1 year ago
Hmm, I'd say it's Notification. You know, getting the right people informed and all that jazz.
upvoted 0 times
...
Frederica
1 year ago
Gotta be Preparation, that's where you build the incident response plan. Easy peasy!
upvoted 0 times
...
Noelia
1 year ago
Haha, I bet James is wishing he had a crystal ball to see the future incidents. Preparation is key, though!
upvoted 0 times
Skye
1 year ago
D) Notification
upvoted 0 times
...
Alline
1 year ago
C) Preparation
upvoted 0 times
...
Dusti
1 year ago
B) Recovery
upvoted 0 times
...
Cory
1 year ago
A) Eradication
upvoted 0 times
...
...
Rory
1 year ago
Definitely the Preparation step. Gotta lay the groundwork before you can handle any actual incidents, right?
upvoted 0 times
Deandrea
1 year ago
C) Preparation
upvoted 0 times
...
Tanesha
1 year ago
B) Recovery
upvoted 0 times
...
Cecilia
1 year ago
A) Eradication
upvoted 0 times
...
...
Kattie
1 year ago
Hmm, I think James is currently working on the Preparation step. Building an IH&R plan sounds like the preparatory phase to me.
upvoted 0 times
Ryan
1 year ago
I see, so Notification is the final step in the process then.
upvoted 0 times
...
Georgiann
1 year ago
No, Recovery usually follows Preparation in the IH&R process.
upvoted 0 times
...
Moon
1 year ago
I think Eradication comes after Preparation, right?
upvoted 0 times
...
Kate
1 year ago
I agree, Preparation seems like the right step to start with.
upvoted 0 times
...
...
Nickole
1 year ago
I believe Eradication is also important, but without proper Preparation, it won't be effective.
upvoted 0 times
...
Alyce
1 year ago
I agree with Jacquline, Preparation is crucial for building a solid IH&R plan.
upvoted 0 times
...
Jacquline
1 year ago
I think James is currently working on the Preparation step.
upvoted 0 times
...

Save Cancel