Question

which phase of an ir is described here? \this is where the team goes into action to halt the effects of the incident and remove any malware or other issues from the corporation’s network before it can cause further damage.\

○ preparation

○ detection and analysis

○ containment and eradication

○ post - incident recovery

Explanation:

To determine the correct phase of Incident Response (IR), we analyze each option:

• Preparation: Involves planning and readiness, not active incident mitigation.
• Detection and Analysis: Focuses on identifying and understanding the incident, not resolving it.
• Containment and Eradication: Matches the description as it involves acting to stop the incident's effects and remove malware/issues to prevent further damage.
• Post - incident Recovery: Occurs after the incident is contained, focusing on restoring systems.

Answer:

C. Containment and Eradication