Eccouncil Exam 312-39 Topic 3 Question 93 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 93
Topic #: 3

Which of the following is a correct flow of the stages in an incident handling and response (IH&R) process?

AContainment --> Incident Recording --> Incident Triage --> Preparation --> Recovery --> Eradication --> Post-Incident Activities

BPreparation --> Incident Recording --> Incident Triage --> Containment --> Eradication --> Recovery --> Post-Incident Activities

CIncident Triage --> Eradication --> Containment --> Incident Recording --> Preparation --> Recovery --> Post-Incident Activities

DIncident Recording --> Preparation --> Containment --> Incident Triage --> Recovery --> Eradication --> Post-Incident Activities

Show Suggested Answer

Suggested Answer: B

by Abel at Sep 19, 2024, 01:08 AM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mozell

4 months ago

Is it just me, or does this incident response process sound like a really intense game of Tetris? Gotta fit all the steps together perfectly!

upvoted 0 times

Dewitt

3 months ago

Kallie: Yeah, it's all about fitting the pieces together in the right order.

upvoted 0 times

...

Mirta

3 months ago

User 3: I agree, that order makes sense to me.

upvoted 0 times

...

Kallie

3 months ago

User 2: I think the correct flow is A) Containment --> Incident Recording --> Incident Triage --> Preparation --> Recovery --> Eradication --> Post-Incident Activities

upvoted 0 times

...

Maryanne

3 months ago

User 1: I know right, it does feel like a game of Tetris!

upvoted 0 times

...

Denny

4 months ago

Haha, I bet the exam writer tried to trick us with all these similar-sounding options. I'm going with A, it just makes the most sense to me.

upvoted 0 times

...

Jolene

4 months ago

C looks good to me. Triage is crucial to identify the issue, then you can work on eradication and containment.

upvoted 0 times

...

Maurine

4 months ago

Hmm, I think B might be the right answer. Preparation should come first before you can properly triage and contain the incident.

upvoted 0 times

...

Ines

4 months ago

I'm pretty sure it's option A. That seems like the most logical flow for incident handling.

upvoted 0 times

Ahmed

3 months ago

Yes, that order seems to follow a logical progression in handling incidents.

upvoted 0 times

...

Novella

4 months ago

I agree, it makes sense to start with containment and end with post-incident activities.

upvoted 0 times

...

Gilma

4 months ago

I think you're right, option A does seem like the correct flow.

upvoted 0 times

...

Rhea

4 months ago

But containment should be the first step to prevent further damage.

upvoted 0 times

...

King

4 months ago

I disagree, I believe it's B because preparation should come first.

upvoted 0 times

...

Erick

4 months ago

Hmm, this question is a real 'incident' alright. I hope the correct answer doesn't 'eradicate' my chances of passing!

upvoted 0 times

Hermila

3 months ago

User 3: I'm not so sure, I think it might be B) Preparation --> Incident Recording --> Incident Triage --> Containment --> Eradication --> Recovery --> Post-Incident Activities

upvoted 0 times

...

Nancey

3 months ago

User 2: I agree, that seems like the right order to handle incidents.

upvoted 0 times

...

Santos

4 months ago

I think the correct flow is A) Containment --> Incident Recording --> Incident Triage --> Preparation --> Recovery --> Eradication --> Post-Incident Activities

upvoted 0 times

...

Rhea

4 months ago

I think the correct flow is A.

upvoted 0 times

...

Rosio

5 months ago

D is just plain wrong. Incident Recording should be the first step, not the fourth.

upvoted 0 times

Trinidad

3 months ago

B it is then, Incident Recording should definitely be the first step.

upvoted 0 times

...

Mirta

4 months ago

Definitely, Preparation should come before Incident Triage in the process.

upvoted 0 times

...

Felix

4 months ago

I agree, B seems to be the most logical order for the stages in an incident handling process.

upvoted 0 times

...

Judy

4 months ago

I think B is the correct flow. Incident Recording should come before Incident Triage.

upvoted 0 times

...

Audry

5 months ago

C is a mess. Eradication before Containment? What kind of incident response is that?

upvoted 0 times

Lizbeth

4 months ago

D) Incident Recording --> Preparation --> Containment --> Incident Triage --> Recovery --> Eradication --> Post-Incident Activities

upvoted 0 times

...

Kimberely

4 months ago

B) Preparation --> Incident Recording --> Incident Triage --> Containment --> Eradication --> Recovery --> Post-Incident Activities

upvoted 0 times

...

Kenia

4 months ago

A) Containment --> Incident Recording --> Incident Triage --> Preparation --> Recovery --> Eradication --> Post-Incident Activities

upvoted 0 times

...

Oren

5 months ago

Option B seems a bit off. Preparation should come before Incident Recording in my opinion.

upvoted 0 times

Carin

4 months ago

Yes, option A is the correct flow of stages in an incident handling and response process.

upvoted 0 times

...

Refugia

5 months ago

That makes sense, so the correct answer would be option A.

upvoted 0 times

...

Colette

5 months ago

I think the correct flow is Containment --> Incident Recording --> Incident Triage --> Preparation --> Recovery --> Eradication --> Post-Incident Activities.

upvoted 0 times

...