Question

During which phase of the incident response life cycle do you isolate affected systems and restrict communication to only trusted individuals?

-Preparation
-Containment
-Detection and analysis
-Eradication

Answer 1

The phase during which affected systems are isolated and communication is restricted to trusted individuals in an incident response life cycle is the Containment phase.Containment is the correct answer.

Step-by-step explanation:

Different phases of the incident response life cycle have distinct functions in addressing a security incident. Among the given options, the phase during which affected systems are isolated and communication is restricted to only trusted individuals is the Containment phase.

This phase is crucial for preventing further damage or data loss and involves immediate actions to limit the spread of an incident. Isolation of affected systems helps to prevent the incident from affecting additional systems, while ensuring that communication on the incident is restricted to trusted individuals helps maintain confidentiality and integrity of the investigation and response process.

The mentioned correct option in the final answer for the phase where affected systems are isolated and communication is restricted to only trusted individuals is Containment.