Certified Incident Handler (ECIH v3) — Question 68

Which one of the following is the correct sequence of flow of the stages in an incident response:

Answer options

• A. Containment - Identification - Preparation - Recovery - Follow-up - Eradication
• B. Preparation - Identification - Containment - Eradication - Recovery - Follow-up
• C. Eradication - Containment - Identification - Preparation - Recovery - Follow-up
• D. Identification - Preparation - Containment - Recovery - Follow-up - Eradication

Correct answer: B

Explanation

The correct sequence is B: Preparation - Identification - Containment - Eradication - Recovery - Follow-up, as this order reflects the systematic approach to managing incidents effectively. The other options do not follow the established incident response framework, which emphasizes preparation and identification before containment and recovery actions.