What is the process of taking organized and careful steps when reacting to a security incident or cyberattack?

What is the process of taking organized and careful steps when reacting to a security incident or cyberattack?

• A. Eradication Phase
• B. Incident triage
• C. Machine Learning
• D. Incident Handling and Response

Answer: (D)

Organized and careful reaction to a security incident is the incident handling and response process. This approach provides a structured set of steps for dealing with incidents—from initial detection and analysis through containment, eradication, and recovery, plus post-incident review and improvement. It emphasizes defined roles, documented procedures, and evidence preservation, ensuring actions are consistent, timely, and auditable. Incident triage is only the initial assessment and prioritization of incidents, not the full lifecycle. Eradication is one phase focused on removing the cause, not the entire handling process, and machine learning is a tool that might aid detection or analysis rather than a process for responding to incidents.

Organized and careful reaction to a security incident is the incident handling and response process. This approach provides a structured set of steps for dealing with incidents—from initial detection and analysis through containment, eradication, and recovery, plus post-incident review and improvement. It emphasizes defined roles, documented procedures, and evidence preservation, ensuring actions are consistent, timely, and auditable. Incident triage is only the initial assessment and prioritization of incidents, not the full lifecycle. Eradication is one phase focused on removing the cause, not the entire handling process, and machine learning is a tool that might aid detection or analysis rather than a process for responding to incidents.