Which of the following steps of the process does this describe?

An analyst is remediating items associated with a recent incident. The analyst has isolated the vulnerability and is actively removing it from the system.

Which of the following steps of the process does this describe?
A . Eradication
B . Recovery
C . Containment
D . Preparation

View Answer

Answer: A

Explanation:

Eradication is a step in the incident response process that involves removing any traces or remnants of the incident from the affected systems or networks, such as malware, backdoors, compromised accounts, or malicious files. Eradication also involves restoring the systems or networks to their normal or secure state, as well as verifying that the incident is completely eliminated and cannot recur. In this case, the analyst is remediating items associated with a recent incident by isolating the vulnerability and actively removing it from the system. This describes the eradication step of the incident response process.