Certified Incident Handler (ECIH v3) — Question 10
Incident handling and response steps help you to detect, identify, respond and manage an incident. Which of the following steps focus on limiting the scope and extent of an incident?
Answer options
- A. Eradication
- B. Containment
- C. Identification
- D. Data collection
Correct answer: B
Explanation
The correct answer is B, Containment, as it specifically involves limiting the damage and preventing the incident from spreading further. Eradication focuses on removing the cause of the incident, Identification is about recognizing the incident, and Data collection pertains to gathering information, none of which directly limit the scope of the incident.