Eccouncil Exam 312-39 Topic 3 Question 105 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 105
Topic #: 3

Which of the following is a correct flow of the stages in an incident handling and response (IH&R) process?

AContainment --> Incident Recording --> Incident Triage --> Preparation --> Recovery --> Eradication --> Post-Incident Activities

BPreparation --> Incident Recording --> Incident Triage --> Containment --> Eradication --> Recovery --> Post-Incident Activities

CIncident Triage --> Eradication --> Containment --> Incident Recording --> Preparation --> Recovery --> Post-Incident Activities

DIncident Recording --> Preparation --> Containment --> Incident Triage --> Recovery --> Eradication --> Post-Incident Activities

Show Suggested Answer

Suggested Answer: B

by Geoffrey at May 05, 2025, 07:26 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Virgina

16 hours ago

D seems a bit disorganized. Preparation should come before containment, and recovery should happen after eradication.

upvoted 0 times

...

Broderick

2 days ago

I disagree, I believe it is B) Preparation --> Incident Recording --> Incident Triage --> Containment --> Eradication --> Recovery --> Post-Incident Activities.

upvoted 0 times

...

Ammie

17 days ago

I think the correct flow is A) Containment --> Incident Recording --> Incident Triage --> Preparation --> Recovery --> Eradication --> Post-Incident Activities.

upvoted 0 times

...

Sarah

20 days ago

Hmm, C doesn't look right. Triage should happen before eradication, not the other way around.

upvoted 0 times

...

Sue

24 days ago

Option B seems a bit off. Preparation should come before triage and containment, not after.

upvoted 0 times

...

Florinda

1 months ago

I think option A is the correct flow. The stages seem to be in the right order, with containment coming after triage and before eradication.

upvoted 0 times

Emily

5 days ago

I agree, option A does seem to be the correct flow. It makes sense to have containment before eradication.

upvoted 0 times

...