Match each cloud incident response phase to its primary activity.
Drag a concept onto its matching description — or click a concept then click the description.
Develop incident response plan and tools
Identify potential security incidents
Isolate affected systems and prevent spread
Restore normal operations and verify integrity
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Preparation: Develop and test incident response plan, configure tools.
Incident response in cloud requires adaptation to shared responsibility and ephemeral resources.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Preparation: Develop and test incident response plan, configure tools.
Why this is correct
Preparation involves planning and tool setup before incidents occur.
Detection & Analysis: Identify and assess the incident.
Why this is correct
Detection and analysis focus on recognizing and understanding the incident.
Containment: Isolate affected resources to prevent spread.
Why this is correct
Containment aims to limit damage by isolating compromised systems.
Eradication & Recovery: Remove threat and restore normal operations.
Why this is correct
Eradication and recovery involve eliminating the root cause and restoring services.
Detection & Analysis: Isolate affected resources to prevent spread.
Why it's wrong here
Incorrect: Isolating resources is part of Containment, not Detection & Analysis.
Containment: Conduct lessons learned and update plans.
Why it's wrong here
Incorrect: Lessons learned is a Post-Incident activity, not Containment.
Go deeper
About these practice questions
One of 964 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.