GIAC Certified Incident Handler (GCIH) — Question 122

While examining multiple compromised systems, an investigator lists a priority for each machine based on executive input and the type of service and data each machine provides the organization. Which investigative technique does this describe?

Answer options

• A. Pivoting
• B. Enumeration
• C. Attribution
• D. Triaging

Correct answer: D

Explanation

The correct answer is D, Triaging, as it involves determining the priority of systems based on their importance to the organization. The other options, such as Pivoting, Enumeration, and Attribution, refer to different investigative techniques that do not specifically focus on prioritization based on executive input and service significance.