Computer Hacking Forensic Investigator (CHFI) — Question 115

In handling computer-related incidents, which IT role should be responsible for recovery, containment, and prevention to constituents?

Answer options

• A. Security Administrator
• B. Network Administrator
• C. Director of Information Technology
• D. Director of Administration

Correct answer: B

Explanation

The Network Administrator is essential in managing and securing the network infrastructure, making them the most suitable for recovery, containment, and prevention during incidents. The Security Administrator focuses more on the overall security policies, while the Director roles are more strategic and administrative, lacking the direct involvement needed in incident management.