Incident Response Activities

For each of the following incident response activities, assign the appropriate CompTIA activity:

Containment

Eradication

Validation

Post-Incident Activities

Remember that the categories assigned by CompTIA differ from those used by NIST and other incident handling standards - use CompTIA standards:

Patching___________________________

Sanitation___________________________

Lessons Learned___________________________

Reimaging___________________________

Secure Disposal___________________________

Isolation___________________________

Scanning___________________________

Removal___________________________

Reconstruction___________________________

Permission Verification___________________________

User Account Review___________________________

Segmentation___________________________