Complete the code to name the first phase of the incident response lifecycle.
The first phase of the incident response lifecycle is called [1].The first phase is Preparation. It involves getting ready to handle incidents by setting up tools, policies, and training.
Complete the code to identify the phase where the incident is detected and reported.
The phase where an incident is first noticed and reported is called [1].
The Identification phase is when the incident is detected and reported so the response can begin.
Fix the error in naming the phase where the threat is removed from the system.
The phase where the threat is removed is called [1].Eradication is the phase where the cause of the incident is removed from the environment.
Fill both blanks to describe the phases that involve limiting damage and restoring systems.
The [1] phase focuses on limiting damage, while the [2] phase restores normal operations.
Containment limits the spread or damage of the incident. Recovery restores systems to normal working order.
Fill all three blanks to complete the phases in order: preparation, identification, and containment.
The first phase is [1], followed by [2], and then [3].
The correct order starts with Preparation, then Identification, and then Containment.