medium
Single Answer
0

Wiping a drive and reinstalling from known good media is an example of what incident response option?

Answer Options

A

Recovery

B

Containment

C

Eradication

D

Root cause elimination

Correct Answer: C

Explanation

Eradication efforts focus on completely removing all artifacts of a compromise or event. Wiping drives to ensure that no remnant malware or other artifacts remain, then reinstalling using known good media are examples of eradication processes. Restoring the system to service after it has been remediated occurs after eradication. Containment efforts attempt to limit the potential spread or ongoing impact of an incident, and root cause analysis is used to determine the underlying causes of an issue, incident, or event. Root cause elimination is not a commonly used term for this.