Certified Incident Handler (ECIH v3) — Question 32

The goal of incident response is to handle the incident in a way that minimizes damage and reduces recovery time and cost. Which of the following does NOT constitute a goal of incident response?

Answer options

• A. Dealing with human resources department and various employee conflict behaviors.
• B. Using information gathered during incident handling to prepare for handling future incidents in a better way and to provide stronger protection for systems and data.
• C. Helping personal to recover quickly and efficiently from security incidents, minimizing loss or theft and disruption of services.
• D. Dealing properly with legal issues that may arise during incidents.

Correct answer: A

Explanation

Option A is correct because it focuses on employee conflicts, which is not related to incident response goals. The other options (B, C, and D) directly address objectives that aim to improve future incident handling, support quick recovery, and manage legal implications, which are essential components of an effective incident response plan.