Eccouncil Exam 312-39 Topic 3 Question 105 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 105
Topic #: 3

Which of the following is a correct flow of the stages in an incident handling and response (IH&R) process?

AContainment --> Incident Recording --> Incident Triage --> Preparation --> Recovery --> Eradication --> Post-Incident Activities

BPreparation --> Incident Recording --> Incident Triage --> Containment --> Eradication --> Recovery --> Post-Incident Activities

CIncident Triage --> Eradication --> Containment --> Incident Recording --> Preparation --> Recovery --> Post-Incident Activities

DIncident Recording --> Preparation --> Containment --> Incident Triage --> Recovery --> Eradication --> Post-Incident Activities

Show Suggested Answer

Suggested Answer: B

by Geoffrey at May 05, 2025, 07:26 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

3 days ago

Hmm, C doesn't look right. Triage should happen before eradication, not the other way around.

upvoted 0 times

...

7 days ago

Option B seems a bit off. Preparation should come before triage and containment, not after.

upvoted 0 times

...

15 days ago

I think option A is the correct flow. The stages seem to be in the right order, with containment coming after triage and before eradication.

upvoted 0 times

...