Eccouncil Exam 312-39 Topic 7 Question 78 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 78
Topic #: 7

Which of the following steps of incident handling and response process focus on limiting the scope and extent of an incident?

AContainment

BData Collection

CEradication

DIdentification

Show Suggested Answer

Suggested Answer: A

by Detra at Apr 14, 2024, 04:27 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kenneth

4 months ago

I believe it's A) Containment because it's important to control the incident from spreading further.

upvoted 0 times

...

Caitlin

4 months ago

I feel like it could also be C) Eradication, to completely get rid of the incident.

upvoted 0 times

...

Art

4 months ago

I agree with Maryann, Containment is about limiting the scope of the incident.

upvoted 0 times

...

Maryann

5 months ago

I think the answer is A) Containment.

upvoted 0 times

...

Loren

5 months ago

So A) Containment is the best option for limiting the scope and extent of an incident.

upvoted 0 times

...

Josphine

5 months ago

Eradication is actually about completely removing the incident, not just limiting it.

upvoted 0 times

...

Hollis

5 months ago

I'm not sure, but C) Eradication also sounds like it could limit the extent of the incident.

upvoted 0 times

...

Loren

5 months ago

Yes, that makes sense. Containment is about limiting the scope of the incident.

upvoted 0 times

...

Josphine

6 months ago

I agree, but I think the answer is A) Containment.

upvoted 0 times

...

Loren

6 months ago

I think the question about incident handling is tricky.

upvoted 0 times

...

Virgie

7 months ago

Haha, a 'controlled burn'? I think you've been watching too many action movies, my friend. Let's just focus on the actual incident response process, shall we?

upvoted 0 times

...

Sylvia

7 months ago

Exactly! Containment is the first and most crucial step. We need to stop the bleeding before we can start the healing process.

upvoted 0 times

...

Amber

7 months ago

Good point, but Eradication comes after Containment. We can't eradicate anything if we don't first contain the incident.

upvoted 0 times

...

Asha

7 months ago

Containment it is then. Hey, do you think they'll ask us to perform a 'controlled burn' to contain the incident? That would be cool!

upvoted 0 times

...

Bulah

7 months ago

I agree, Containment is the key. We need to isolate the affected systems and stop the bleeding, so to speak.

upvoted 0 times

...

Chau

7 months ago

Containment - that's the obvious choice here. We need to limit the damage and prevent the incident from spreading further.

upvoted 0 times

Remedios

6 months ago

Definitely, containment is crucial to stop further damage.

upvoted 0 times

...

Jin

6 months ago

A) Containment

upvoted 0 times

...