Incident response · Question 9 of 12
Which order of phases corresponds to the usual incident handling process?
1 answer is correct. Medium
Show answer
Answer
- C Preparation, detection, analysis, containment, eradication, recovery, post-incident
Explanation
The process starts before the incident with preparation. Detection and analysis are followed by containment, eradication and recovery, concluded by lessons learned that feed back into preparation.