Practice · Certified Incident Handler (E|CIH)

~/eccouncil-ecih · eccouncil-ecih_d1_acf8c813194f ▊

← Certified Incident Handler (E|CIH) · practice sheet

eccouncil-ecih_d1_acf8c813194f domain/d1 · medium single

A newly hired analyst reads that the ECIH program is 'method-driven' and provides a 'holistic approach' to organizational IH&R. Which statement BEST captures the scope this approach is intended to cover according to the source material?

A It covers only the detection and containment phases of incidents
B It focuses exclusively on forensic analysis and prosecution
C It covers everything from preparing/planning the incident response process to recovering organizational assets from the impact of incidents
D It is limited to preventing threats before any incident occurs

Unlock this exam to join the per-question discussion and vote on questions.

next question →