アナリストは、最近のインシデントに関連する項目を修復しています。アナリストは脆弱性を特定し、システムから積極的に削除しています。これは次のプロセスのどのステップを説明していますか?
正解:A
Eradication is a step in the incident response process that involves removing any traces or remnants of the incident from the affected systems or networks, such as malware, backdoors, compromised accounts, or malicious files. Eradication also involves restoring the systems or networks to their normal or secure state, as well as verifying that the incident is completely eliminated and cannot recur. In this case, the analyst is remediating items associated with a recent incident by isolating the vulnerability and actively removing it from the system. This describes the eradication step of the incident response process.