Which term describes the process of taking organized and careful steps when reacting to a security incident?

Which term describes the process of taking organized and careful steps when reacting to a security incident?

• A. Incident Handling and Response
• B. Eradication Phase
• C. Machine Learning
• D. Unsupervised Learning

Answer: (A)

Incident handling and response describes the organized, careful steps taken when reacting to a security incident. It covers the entire lifecycle—from preparation and detection to containment, eradication, recovery, and post-incident review—using predefined playbooks and clearly assigned roles. This structured approach ensures responders act consistently, minimize damage, and restore operations as quickly as possible while learning from the event. The eradication phase is part of this process, focusing on removing the attacker’s artifacts and footholds, but it alone does not describe the full response. Machine learning and unsupervised learning are analytical techniques used to detect or analyze data, not the procedural response to an incident.

Incident handling and response describes the organized, careful steps taken when reacting to a security incident. It covers the entire lifecycle—from preparation and detection to containment, eradication, recovery, and post-incident review—using predefined playbooks and clearly assigned roles. This structured approach ensures responders act consistently, minimize damage, and restore operations as quickly as possible while learning from the event. The eradication phase is part of this process, focusing on removing the attacker’s artifacts and footholds, but it alone does not describe the full response. Machine learning and unsupervised learning are analytical techniques used to detect or analyze data, not the procedural response to an incident.