Certified Ethical Hacker (CEH v11) — Question 129

Which of the following incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an organization?

Answer options

• A. Preparation phase
• B. Containment phase
• C. Identification phase
• D. Recovery phase

Correct answer: A

Explanation

The correct answer is A, the Preparation phase, as it involves creating plans, training personnel, and ensuring that the organization is ready to respond to incidents. The other phases, such as Containment, Identification, and Recovery, deal with specific actions taken during or after an incident rather than the preparatory steps.