Which of the following is NOT a typical objective of Incident Response?

A. Eradication of Threats
B. Root Cause Analysis
C. Financial Forecasting
D. Containment of the Incident

Answer: C
Explanation:
An Incident Response Plan aims to manage the situation in a way that limits damage and reduces recovery time and costs. A breakdown of the relevance of each option is as follows:

• Eradication of Threats: Removing malware or closing the vulnerabilities is a standard objective.
• Root Cause Analysis: Finding out how the breach occurred helps prevent future incidents.
• Financial Forecasting: This is typically not a part of an Incident Response Plan; it is more relevant to business or strategic planning.
• Containment of the Incident: Temporarily or permanently isolating affected systems to prevent further damage is also a standard objective.