Certified Ethical Hacker (CEH v10) — Question 105

Which of the following incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an organization?

Answer options

• A. Preparation phase
• B. Containment phase
• C. Identification phase
• D. Recovery phase

Correct answer: A

Explanation

The correct answer is A, as the Preparation phase focuses on setting up protocols and ensuring that the organization is ready to respond to incidents. The Containment phase is about managing an incident once it occurs, the Identification phase is for recognizing incidents, and the Recovery phase deals with restoring systems after an incident, none of which involve the preparatory tasks outlined in the question.