Drag a concept onto its matching description — or click a concept then click the description.
Concepts
Matches
Train staff and establish policies
Identify potential incidents
Isolate affected systems
Restore normal operations
mediumMatchingObjective-mapped
SSCP Practice Question: Match each incident response phase to its…
Match each incident response phase to its activity.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Preparation: Establishing procedures and training the team.
The incident response phases include Preparation, Detection & Analysis, Containment, Eradication & Recovery, and Post-Incident Activity. Common confusions are mixing preparation with containment and detection with recovery.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Preparation: Establishing procedures and training the team.
Why this is correct
This is correct because preparation involves setting up policies and training.
- ✓
Detection and Analysis: Identifying and confirming the incident.
Why this is correct
This is correct as detection is about noticing and verifying.
- ✗
Preparation: Containing the incident to prevent further damage.
Why it's wrong here
This is containment, not preparation.
- ✗
Detection and Analysis: Restoring normal operations after the incident.
Why it's wrong here
This is recovery, not detection.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 920 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.