At which stage in the incident response process does evidence collection occur?
Practise this SSCP Security Exam Prep question free, then download the PDF, watch the video walkthrough, or unlock timed mock exams for the full web bank.
✓ Correct answer: D. Evidence GatheringAnswer: Evidence Gathering The incident response process includes the following stages: Preparation: Developing and implementing an incident response capability. Identification: Detecting and acknowledging the occurrence of an incident. Evidence Gathering: Collecting relevant data and securing evidence. Containment: Mitigating the spread and damage from the incident. Eradication: Removing the incident's cause and affected components. Recovery: Restoring normal operations and confirming system functionality. Lessons Learned: Documenting and analyzing the incident response to improve future preparedness.
Keep practising. Use the free SSCP Security Exam Prep PDF, watch the YouTube walkthrough, or unlock all 10 web questions with timed mock exams.
Free practice here. Timed mocks when you are ready.
Study the SSCP Security Exam Prep free question explanations, download the PDF, then unlock timed mock exams on the web when you want exam-day practice.
Theory