Certified Incident Handler (ECIH v3) — Question 9

Which of the following is an appropriate flow of the incident recovery steps?

Answer options

• A. System Operation-System Restoration-System Validation-System Monitoring
• B. System Validation-System Operation-System Restoration-System Monitoring
• C. System Restoration-System Monitoring-System Validation-System Operations
• D. System Restoration-System Validation-System Operations-System Monitoring

Correct answer: D

Explanation

The correct sequence is D because it begins with System Restoration, ensuring that the systems are recovered before validating their functionality and then operating and monitoring them. Options A, B, and C incorrectly place validation and monitoring steps before ensuring that the systems are properly restored and operational.