Practice · Certified Incident Handler (E|CIH)

~/eccouncil-ecih · eccouncil-ecih_d1_4cc5051ef892 ▊

← Certified Incident Handler (E|CIH) · practice sheet

eccouncil-ecih_d1_4cc5051ef892 domain/d1 · medium single

During a tabletop exercise, a security manager wants to build the incident response program around Module 01 topics of the ECIH curriculum. Which of the following belongs specifically to the 'Introduction to Incident Handling and Response' module rather than to the later process module?

A Explaining the process of preserving, packaging, and transporting evidence
B Explaining various attack and defense frameworks such as the Cyber Kill Chain and MITRE ATT&CK
C Describing evidence gathering and forensics analysis
D Understanding the process of containment

Unlock this exam to join the per-question discussion and vote on questions.

next question →