EC-COUNCIL 212-89 Online Practice Questions and Exam Preparation

EC-COUNCIL 212-89 Online Questions & Answers

• Question 231:

  In which of the following phases of incident handling and response (IHandR) process the identified security incidents are analyzed, validated, categorized, and prioritized?

  A. Incident recording and assignment
  B. Containment
  C. Notification
  D. Incident triage
  D. Incident triage

  ---

  Incident triage is the phase in the incident handling and response process where identified security incidents are analyzed, validated, categorized, and prioritized. This step is critical for determining the severity of incidents and deciding on the allocation of resources for effective response. It involves initial analysis to understand the nature of the incident, its impact, and urgency, which guides the subsequent response actions.

  References: The incident triage phase is a foundational concept in the ECIH v3 curriculum, emphasizing the importance of a structured approach to responding to security incidents, ensuring that resources are focused where they are needed most.

• Question 232:

  Incident handling and response steps help you to detect, identify, respond and manage an incident. Which of the following steps focus on limiting the scope and extent of an incident?

  A. Eradication
  B. Containment
  C. Identification
  D. Data collection
  B. Containment

  ---

  Explanation