Which of the following steps in the Computer Forensic Investigation process limits the extent and significance of an incident to ensure that it does not spread to other systems?
Suggested Answer: A
Get Premium ECSS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
MA
Makeda
11 months ago
I’m surprised this is even a question!
AD
Adolph
11 months ago
Wait, are we sure it's not detection?
EL
Elly
12 months ago
Containment is key to stopping the spread.
LE
Lenita
12 months ago
I thought it was eradication?
KA
Kara
1 year ago
It's definitely containment!
LA
Lashawn
1 year ago
Preparation might involve planning for incidents, but it doesn’t really limit the spread, so I’m pretty sure it’s containment.
ME
Melissa
1 year ago
I’m leaning towards eradication, but that seems more about removing the threat after it’s contained.
ST
Stefan
1 year ago
I remember practicing a question like this, and I think detection is more about identifying the issue rather than limiting it.
TR
Tresa
1 year ago
I think containment is the right answer since it’s about stopping the incident from spreading, but I’m not 100% sure.
VI
Vincenza
1 year ago
The virus-type scan seems like it would be the most intensive, as it has to check for a wide range of known virus signatures.
LI
Lili
1 year ago
Hmm, this seems like a straightforward question. Azure Cache for Redis should be able to handle the session state and HTTP response requirements.
MA
Margarita
1 year ago
I've got a good strategy for this. I'll eliminate the options that don't seem relevant to an IPv6 fallback scenario, then select the two that best fit the description.