CompTIA CySA+ (CS0-003) — Question 487

An analyst is remediating items associated with a recent incident. The analyst has isolated the vulnerability and is actively removing it from the system. Which of the following steps of the process does this describe?

Answer options

• A. Eradication
• B. Recovery
• C. Containment
• D. Preparation

Correct answer: A

Explanation

The correct answer is A, Eradication, as it involves removing the identified vulnerabilities from the system. Recovery pertains to restoring systems to normal operations, while Containment is about limiting the impact of the incident, and Preparation refers to planning for potential incidents before they occur.